Legal
Cookie policy
The short version: we only use the cookies and browser storage Regimate needs to work. No advertising or tracking cookies, so there's no cookie banner.
In short. This website doesn't set cookies for visitors. The Regimate app sets one cookie to keep you signed in, plus a few short-lived security cookies when you sign in with Google or Apple. We don't use advertising, analytics or tracking cookies, so we don't need to ask for your consent.
1. What cookies and browser storage are
Cookies are small files a website stores in your browser. Websites can also keep information in your browser's local storage and session storage. The law in the UK (the Privacy and Electronic Communications Regulations) allows storage that's strictly necessary to provide a service you've asked for without consent. Everything we use falls into that category.
2. This website (regimate.app)
Our marketing website doesn't set any cookies for visitors. If a member of our team signs in to manage the website, WordPress sets login cookies on their browser only.
The website loads its fonts from Google Fonts. Google receives your IP address to deliver them, but doesn't set cookies through this. See the Sub-processors page.
3. The Regimate app (my.regimate.app)
Cookies
| Name | What it does | How long |
|---|---|---|
regimate.session_token | Keeps you signed in. It's first-party, HttpOnly and Secure, so scripts can't read it and it's only sent over HTTPS. | 30 days, refreshed once a day while you use Regimate. Removed when you sign out. |
Sign-in security cookies (named regimate.*) | Set only while you sign in with Google or Apple, to protect the sign-in from being hijacked. | A few minutes |
Browser storage
| Key | What it does | How long |
|---|---|---|
regimate-finder:<ID> | If you message an owner as a finder, keeps your private link to that conversation on your device so you can come back to it. | Until you clear it |
emergency_session (session storage) | Keeps you signed in to the Emergency Access portal. | Until you close the tab; the session itself ends after 2 hours |
pwa-install-dismissed | Remembers that you closed the “install the app” prompt. | Until you clear it |
regimate-label-format | Remembers which label sheet you print QR labels on. | Until you clear it |
The web app also uses a service worker to cache its own files, so it loads quickly and opens when you're offline. If you turn on browser notifications, your browser stores a push subscription so we can send them.
4. The iPhone and Android apps
The apps keep your sign-in token in your device's secure keychain or keystore. They don't use advertising identifiers or third-party tracking.
5. Third-party services
- Payments. When you subscribe, you're taken to a checkout page hosted by Stripe, which sets its own cookies to process payments and prevent fraud. See Stripe's cookie policy.
- Maps. Maps in the web app load tiles from CARTO and OpenStreetMap, and address search uses OpenStreetMap Nominatim. These services receive your IP address and the area you view or search. They aren't used to track you.
- Sign in with Google or Apple takes you to their pages, which are covered by their own policies.
6. Controlling cookies
You can block or delete cookies and site data in your browser settings. If you block the session cookie you won't be able to sign in to the web app. Clearing site data will also remove any finder conversation links saved on your device, so keep the link from your email if you asked for updates.
7. Changes
If we ever want to use cookies that aren't strictly necessary, such as analytics cookies, we'll update this policy and ask for your consent first.
8. Contact
Questions? Email privacy@regimate.app. For how we handle personal data more generally, see our Privacy policy.