Cookie policy
Last updated November 10, 2026
This policy lists every cookie and every item of browser storage (local storage, session storage and IndexedDB) that the CertPing website and application at www.certping.com set, and the few cookies our API at api.certping.com sets while you sign in. It is part of our Privacy Policy. Our documentation at docs.certping.com is a separate site and is not covered here.
Apart from the Giftbit reward window described under Rewards, neither the website nor the application loads scripts from other companies' servers. The PostHog analytics code is part of our own pages, and what it stores is listed under Analytics.
Strictly necessary
These keep you signed in, protect sign-in and remember your privacy choices. The Service does not work without them, so they are always on.
| Name | Type | Set on | Lasts | Purpose |
|---|---|---|---|---|
| accessToken, refreshToken | Local storage | Application | Until you sign out | Keep you signed in to your account. |
| auth-storage-v2 | Local storage | Application | Until you sign out | Remember who is signed in and when the session ends. |
| cp_build | Cookie | Application | Until you close the browser | Keep your browser on the same version of the application while we release an update. |
| oauth_state_<provider>, oauth_pkce_<provider>, oauth_partner_<provider> | Cookie | api.certping.com | 5 minutes | Protect sign-in with Google, GitHub, Microsoft or LinkedIn, and keep a partner code through it. |
| certping:social-auth-attempt | Session storage | Application | 5 minutes | Remember which sign-in provider you chose while you are away at that provider. |
| SESSION | Cookie | api.certping.com | Until single sign-on completes | Hold the state of single sign-on through your organization's identity provider. |
| certping:analytics-consent:v1, certping:basic-analytics:v1 | Local storage | Website and application | Until you clear it | Remember your choice in Privacy choices, so analytics follows it. |
| certping:chunk-reload:<release>:<error> | Session storage | Website and application | Until you close the tab | Reload the page once if it was loaded from an older release. |
| msal.* | Session storage | Blog editor (CertPing staff only) | Until you close the tab | Keep CertPing staff signed in to the blog editor. |
Sign-up, referrals and offers
These carry what you chose on the website into sign-up and checkout: a partner or referral code, an offer code, or the product you picked. They are set whether or not you accept analytics, because they carry those choices; a partner or referral code is kept to credit the partner, as the Privacy Policy describes under our legitimate interests.
| Name | Type | Set on | Lasts | Purpose |
|---|---|---|---|---|
| certping:partner-referral:first-touch | Local storage | Website and application | Until you clear it | Remember the first partner or referral code in a link you followed. |
| certping:domain-campaign:code | Local storage | Website and application | Until you clear it or complete a purchase | Remember an offer code so checkout can apply it. |
| certping:post-auth-intent | Local storage | Website and application | Until you sign in, at most 24 hours | Remember the product, domain name or trademark you chose before signing up, and open it after sign-in. |
| certping:return-to-plan-choice | Local storage | Application | Until you sign in, at most 24 hours | Return you to the plan you were choosing after sign-in. |
Preferences
These remember how you like the application to look and what you were doing.
| Name | Type | Set on | Lasts | Purpose |
|---|---|---|---|---|
| theme | Local storage | Application | Until you clear it | Remember light or dark mode. |
| sidebar:state | Cookie | Application | 7 days | Remember whether the sidebar is open. |
| sidebar-group-collapsed:<group>, <list>_view, certificates-view-preference, certping:overview:expiry-view, certping:overview:snoozed-steps | Local storage | Application | Until you clear it | Remember collapsed menu groups, list or card views, the expiry chart view and the next steps you snoozed. |
| certping.domains.attention-hidden:<user>, certping:renewal-choice:<user>:<organization>, certping.problem-report.<report>, certping:viewer:<setting>:<user>:<organization> | Local storage | Application | Until you clear it | Remember a hidden domain notice, your certificate renewal choice, a problem you already reported and your keyboard shortcut settings. |
| certping (recents) | IndexedDB | Application | Until you clear it | Show the places in the application you visited recently. |
| certping:trademark-application-draft:<user> | Session storage | Application | Until you submit the application, sign out or close the tab | Keep your trademark application draft while you fill it in. The key may contain your email address. |
| certping.paymentMethodBaseline, certping.domainSetupReopen, certping.status-banner.dismissed, domain-order-email-resend:<order>:<email> | Session storage | Application | Until you close the tab | Notice a card you just added, reopen domain setup after payment, keep a dismissed status banner closed and stop an email from being resent twice. |
Analytics
PostHog measures how the website and application are used. These are set only when analytics runs with cookies: after you choose Accept all or, if your browser's time zone is outside Europe and names a region, until you choose Reject all. They are never set when your browser sends Global Privacy Control or Do Not Track, and they are deleted when analytics stops using cookies.
| Name | Type | Set on | Lasts | Purpose |
|---|---|---|---|---|
| ph_<project key>_posthog | Cookie | certping.com and its subdomains | 365 days | An analytics identifier, so that your later visits are recognised, and the campaign that brought you. |
| ph_<project key>_posthog | Local storage | Website and application | Until you clear it | A copy of the analytics identifier and campaign. |
| ph_<project key>_* | Session storage | Website and application | Until you close the tab | Count the pages of one visit and one browser window together. |
| __ph_opt_in_out_<project key> | Local storage | Website and application | Until you clear it | Record that analytics with cookies is on, or was turned off. |
| certping:analytics:subscription-completed:<subscription> | Local storage | Application | Until you clear it | Stop one completed subscription from being counted twice. |
Other companies' sites
When you pay, you go to a page hosted by Stripe, and when you sign in with Google, GitHub, Microsoft or LinkedIn, you go to that company's site. Those sites set their own cookies under their own policies.
Rewards
If you receive a gift card reward, the reward window in the application may show Giftbit's own reward page inside our page. That page is loaded from Giftbit's servers and runs Giftbit's code in an isolated frame, and Giftbit may set its own cookies there under its own policy. Other reward links, including Tango Card's, open on the provider's site in a new tab.
Emails
We send email through Azure Communication Services. Our email service provider records whether each email was delivered, and these delivery events help confirm that important messages reach you. The provider also records open and click events: a small image in each HTML email records when it is opened, and its links pass through the provider. We do not use them to build a profile of you. You can limit open tracking by turning off automatic image loading in your email client.
Your choices
Use Privacy choices in the website footer to accept or reject analytics cookies, or to object to cookieless measurement, at any time. How analytics works with and without cookies is described in the Privacy Policy. You can also delete cookies and site data in your browser's settings; if you delete the strictly necessary items, you are signed out.
Questions about this policy: privacy@certping.com.