Yolobeam

Legal

Cookie policy

This policy describes the cookies and similar technologies used on https://yolobeam.com and in the Yolobeam application, why each is set, how long it lasts, and the controls available to you. It supplements our privacy policy.

Effective
July 28, 2026
Last updated
July 28, 2026

1.Overview

Yolobeam LLC uses a deliberately small number of cookies. They fall into two groups: cookies that are strictly necessary to keep you signed in to the Yolobeam application, and product analytics cookies that help us understand how the website and application are used. We set no advertising or cross-site tracking cookies. Read this alongside our privacy policy, which explains how we handle the personal information these technologies involve.

2.What cookies and similar technologies are

A cookie is a small text file a website asks your browser to store and send back on later requests. Cookies let a site recognize your browser between page loads — for example, to remember that you already signed in.

  • Session cookies are erased when you close your browser.
  • Persistent cookies remain for a set period or until you delete them.
  • First-party cookies are set by the site you are visiting. Third-party cookies are set by another domain that the page loads content from.
  • Similar technologies include local storage, session storage, and pixels. We refer to all of these as cookies in this policy.

3.Categories we use

  • Strictly necessary. Required to deliver a service you have asked for, such as authenticating your session and preventing cross-site request forgery. These cannot be switched off through our interface, and the service will not function without them. Under the ePrivacy Directive they do not require consent.
  • Functional. Remember choices you make, such as dismissing a notice. These are optional.
  • Analytics. Help us understand how the site and application are used — which pages are visited, which features are clicked, where errors occur, and how pages perform. We use PostHog for this, including its session replay feature. See the sections below for exactly what is collected and how to switch it off.
  • Advertising. None. We do not set advertising or cross-site tracking cookies, we do not run retargeting, and we do not share information for cross-context behavioral advertising.

4.Cookies we set

The table below lists the cookies in use at the effective date of this policy. Names may carry a __Secure- prefix when served over HTTPS.

CookieCategoryPurposeDuration
authjs.session-tokenStrictly necessaryKeeps you signed in to the application and identifies your session on each request.30 days, or until sign-out
authjs.csrf-tokenStrictly necessaryProtects sign-in and form submissions against cross-site request forgery.Session
authjs.callback-urlStrictly necessaryReturns you to the page you were trying to reach after you sign in.Session
ph_<project_token>_posthogAnalyticsIdentifies your browser to PostHog so repeat visits are counted as one visitor, and stores the current session id and referral source.12 months

PostHog also uses browser storage rather than cookies for some of its state. These entries are not transmitted automatically with every request the way a cookie is, but they persist on your device and serve the same purpose.

Storage keyTypePurposeDuration
ph_<project_token>_posthogLocal storageMirrors the analytics cookie and caches feature flag values and your opt-out preference.Until cleared
ph_<project_token>_window_idSession storageDistinguishes browser tabs so session replay can reconstruct a single tab's activity.Until the tab is closed
ph_<project_token>_primary_window_existsSession storagePrevents duplicate recording when the site is open in more than one tab.Until the tab is closed

The strictly necessary cookies are set only after you sign in to the Yolobeam application. The analytics cookie and storage entries are set on both https://yolobeam.com and the application, from your first page view.

5.Product analytics and session replay

We use PostHog as our analytics provider. PostHog acts as our processor: it handles this data on our instructions and does not use it for its own purposes or sell it. The following are enabled:

  • Page views and navigation — which pages you visit, in what order, and the page that referred you.
  • Autocapture — clicks and interactions with buttons and links are recorded automatically, along with the element text and page location.
  • Session replay — a reconstruction of your visit is recorded so we can see how pages are actually used. Text entered into form fields is masked before it leaves your browser, so we see that a field was filled but not what was typed.
  • Error and performance data — uncaught JavaScript errors and page performance measurements, used to diagnose faults.
  • Feature flags and surveys — used to roll out changes gradually and to show occasional in-product questions.

Analytics requests are routed through yolobeam.com/ingest and forwarded to PostHog Cloud in the United States. Routing them through our own domain means the requests are first-party and are not blocked by common content blockers, so you should not rely on a content blocker to prevent this collection — use the controls in the next section instead.

We do not record what you type into form fields, and we do not use analytics data to build advertising profiles or share it with advertising networks. Session replay of the signed-in application is used only to diagnose problems and improve the product.

6.Third-party requests

Some pages load resources from other domains. These do not set cookies on our behalf, but the request itself discloses your IP address and browser details to the provider, which is worth knowing about.

ProviderWhat it servesWhat is disclosed
PostHog (PostHog Cloud US)Product analytics, session replay, error tracking, feature flags, and surveys.IP address, user agent, page URLs, clicks and interactions, session replay data, and the analytics identifiers listed above. Requests are proxied through our own domain.
rsms.meThe Inter typeface used across the site.IP address, user agent, referring page
Google FontsThe JetBrains Mono typeface used for identifiers and code.IP address, user agent, referring page
Our hosting providerPage delivery and edge caching.IP address and request metadata, held in server logs. A load-balancing or security cookie may be set as a strictly necessary measure.

We do not control how these providers handle information they receive directly from your browser. Their own privacy policies govern that processing.

7.Cookies added by organizations

Subscribing organizations on plans that include public event or recruitment pages, custom domains, or third-party integrations may introduce additional cookies through those features. Where an organization does so, that organization is responsible for disclosing them and for obtaining any consent required in its jurisdiction. This policy covers only the cookies we set.

8.Managing cookies

You can control cookies through your browser settings — Chrome, Safari, Firefox, and Edge all let you view stored cookies, delete them, and block them by site. Consult your browser's help pages for the exact steps.

Blocking strictly necessary cookies will prevent you from signing in to the application, and the platform will not work. Blocking or clearing the analytics cookie and storage entries has no effect on how the site functions — you can browse and use the platform normally without them.

Because analytics requests are served from our own domain, content and ad blockers generally will not stop them. To opt out of analytics and session replay, block cookies and site data for yolobeam.com in your browser settings, or browse in a private window and close it when you are done. Clearing site data for yolobeam.com removes the analytics identifier, after which you are counted as a new visitor.

We honor the Global Privacy Control signal where applicable law requires it. We do not sell personal information and we do not share it for cross-context behavioral advertising, so the signal does not change our advertising practices — we have none. We do not respond to Do Not Track headers, as there is no agreed standard for doing so.

You can also ask us to delete the analytics and session replay data associated with your visits. Email support@yolobeam.com from the address you use with us, or tell us the approximate dates and pages involved, and we will locate and delete the matching records. See the privacy policy for the full set of rights available to you.

9.Changes to this policy

If we add, remove, or change the purpose of a cookie, we will update this policy and revise the effective date above. Where a new cookie requires consent, we will request it before setting the cookie.

10.Contact us

Questions about this policy can be sent to support@yolobeam.com.

Related documents

Questions about this document? Email support@yolobeam.com.