Last updated: August 23, 2026
This Cookie Policy explains how Retrace (the "Service"), operated by Yash Bogam, uses cookies and equivalent browser storage on retraceai.tech and its subdomains. It forms part of, and should be read together with, our Privacy Policy and Terms of Service. Where this policy describes cookie categories and retention, it is the controlling document.
We use two categories only: strictly necessary storage, which is required for the Service to function and is always active, and analytics storage, which is set only after you consent. We do not use advertising cookies, we do not run cross-site or cross-device tracking, and we do not sell or share personal information for behavioural advertising.
These are set on all plans and cannot be switched off, because the Service cannot authenticate you or honour your privacy choice without them.
| Name | Purpose | Retention |
|---|---|---|
__Secure-better-auth.session_token | Keeps you signed in across the marketing site, the authentication host, and the dashboard. Scoped to .retraceai.tech, HTTP-only, Secure, SameSite=Lax. | 7 days |
rt_consent | Records your cookie choice so we do not ask again and so analytics stay disabled unless you accepted. | 1 year if you accept; 48 hours if you reject, after which we may ask again |
| Authentication state (short-lived) | Transient values our authentication provider sets during sign-in — for example the OAuth state and verification values that protect the sign-in flow against forgery. | Minutes; deleted once sign-in completes |
retrace_device_id (local storage) | A random identifier for this browser, used only for the optional “trust this device” two-factor step. Never derived from your device or network. | Until you clear site data |
Nothing in this section runs until you select Accept. Before that, the analytics tools are not loaded, no analytics cookie is written, and Google Consent Mode is set to deny storage by default. If you reject, or simply never choose, they stay off.
| Provider | Purpose | Retention |
|---|---|---|
| Product analytics (PostHog) | Aggregate feature usage and reliability. Requests are proxied through our own domain. Sets a first-party identifier in cookie and local storage. | Up to 1 year |
| Google Analytics 4 | Aggregate website and product measurement (_ga, _ga_*). Runs under Google Consent Mode v2 with advertising signals — ad_storage, ad_user_data, ad_personalization — denied at all times, and ad-click data redaction enabled. | Up to 2 years |
| First-party usage counter | A random identifier in local storage (rt_anon_id) that lets us count pages and features without an account. Not linked to your name, email, or account. | Until you clear site data |
Analytics never include trace content, prompts, model responses, tool calls, or other personal data you send to the Service.
Our documentation site is analytics-free: no analytics tools load there and no consent banner is shown, because there is nothing non-essential to consent to.
You can change or withdraw consent at any time. Clearing the rt_consent cookie in your browser makes the banner appear again on your next visit, and choosing Reject stops analytics immediately — in the same page view, without a reload. Rejecting does not affect your ability to sign in or use any paid feature.
Your browser can also block or delete cookies for this site. Blocking strictly necessary cookies will prevent you from signing in. Most browsers additionally offer a "Do Not Track" or global privacy control signal; where applicable law requires us to honour such a signal, we treat it as a rejection of analytics.
The analytics providers named above act as our processors and may process data outside your country, including in the United States. Those transfers rely on the safeguards described in Section 10 of our Privacy Policy. A Data Processing Addendum is available to business and Enterprise customers on request.
If we add, remove, or change the purpose of a cookie, we will update this page and its "Last updated" date. A change that expands the scope of non-essential storage will be accompanied by a fresh consent request.
Questions about this policy, or a request to exercise your rights, can be sent to hello@retraceai.tech.