Legal
Cookie Policy
Table of contents
01What Are Cookies
Cookies are small text files stored on your device when you visit a website. Loadcurl also uses similar technologies such as local storage and in-memory tokens.
We use these on the marketing site (loadcurl.com), the dashboard (app.loadcurl.com), and when the dashboard talks to our API.
02Types We Use
We group cookies and similar storage by purpose.
- Strictly necessary: sign-in, session refresh, CSRF-related cookie flags, and device matching
- Functional: remembering this browser as a device for session lists
- Analytics: aggregated usage on the public marketing site
- Marketing: only if we add optional cookies and you consent
03Marketing Website (loadcurl.com)
The public site uses a smaller set than the dashboard.
- Google Analytics (G-W52CW6TMC3): page views and traffic sources
- Session cookies that keep navigation working during a visit
- Preference cookies if we record cookie consent
04Dashboard and API (app.loadcurl.com)
When you sign in, the API may set a cookie named refresh_token. It is HttpOnly (not readable by JavaScript), scoped to path /, and used only to obtain a new access token. In production the cookie is Secure with SameSite=None so the dashboard on app.loadcurl.com can send it to the API across sites. In local development it may use SameSite=Lax without Secure.
The dashboard keeps the access token in memory (not in a cookie). It stores app_device_id in local storage so login, logout, refresh, and “log out other devices” can identify this browser. Device name, type, and browser are sent to the API and shown under Settings → Sessions.
These cookies and storage are required to use the authenticated product. Blocking them will break sign-in, running tests, and session management.
05Third-Party Cookies
Some cookies are placed by providers that help us operate Loadcurl.
- Google Analytics on the marketing site
- Google Identity Services if you sign in with Google (Google may set its own cookies)
- Payment processors when checkout is connected
- Infrastructure and security providers
06Managing Preferences
You can control non-essential cookies in your browser. You can delete local storage for app.loadcurl.com to reset the device id (you will appear as a new device on next login).
You can revoke dashboard sessions under Settings → Sessions without deleting cookies. Signing out clears the refresh cookie on the API response.
If you disable strictly necessary cookies, sign-in and load tests will not work.
07Do Not Track
Some browsers send a Do Not Track (DNT) signal. Because there is no consistent industry standard for responding to DNT, Loadcurl does not currently alter its data practices based solely on DNT signals.
08Updates to This Policy
We may update this Cookie Policy when authentication, analytics, or legal requirements change. Material changes will be reflected in the effective date below.
09Contact Us
Questions about cookies or tracking on Loadcurl? Reach out and we will help you understand what is stored and how to manage it.