Cookie Policy

Cookies are small text files that a website stores on your device so it can remember things between pages and visits, for example that you are signed in. Similar technologies such as local storage let a website keep small amounts of data in your browser in the same way.

This policy explains which cookies and similar technologies Commento uses on the Commento website and app, why we use them, and how you can control them. It should be read together with our Privacy Policy.

We keep our use of cookies to the minimum needed to run the Service. Today we use only strictly necessary cookies and storage, plus our own cookie-free page view and click measurement on the marketing site. We do not use advertising cookies, and we do not use third-party analytics cookies. If that changes, we will update this policy and ask for your consent where the law requires it.

These are set by Commento itself and are essential for the Service to work. Because they are strictly necessary, they do not require consent, but you can still block them in your browser (the Service will not function without them).

• `commento_access_token`: an HTTP-only session cookie that keeps you signed in to your account. It contains a signed token, not your password. Expires after a limited period or when you sign out.
• `commento_guest_token`: an HTTP-only session cookie set when you open a shared review link as a guest, so your comments on that project can be attributed to you without a full account. Expires after a limited period.

Local storage

We also keep a few preferences in your browser's local storage. These never leave your device unless you take an action that sends them:

• `commento_user` and `commento_current_workspace`: a cached copy of your basic profile and which workspace you last had open, so the app loads faster.
• Theme preference: whether you chose light or dark mode.
• `commento_pending_invite` and `commento_reset_token`: short-lived values that let us complete an invitation or password reset after you sign in.
• `commento_fcm_token`: your browser's push-notification token, only if you have opted in to notifications.
• `commento_blog_list`: a short-lived cache of article listings on the marketing site.

First-party site analytics

On the public marketing pages we measure which pages are viewed and which buttons and links are clicked, so we can improve the site. This is our own measurement, not a third-party analytics service, and it sets no cookies:

• `cmt_vid`: a random identifier in local storage that tells one browser apart from another. It is not linked to your account, name, or email.
• `cmt_sid`: a random identifier in session storage that groups the pages you view in one visit. It is cleared when the tab closes.
• We record the page path, the previous page or referring site, the label of the button or link clicked, and a browser and operating system summary. We do not store your IP address or anything you type.

Some features load content from partners who may set their own cookies. We do not control these cookies; they are governed by the partner's own policy.

• Stripe and Paddle: when you open the checkout or manage billing, our payment partners set cookies for security, fraud prevention, and to remember your progress. See Stripe's cookie policy and Paddle's privacy policy.
• Google: if you sign in with Google, Google sets cookies as part of the sign-in flow. See Google's privacy policy.
• Websites you review: when you annotate a live website inside Commento, that website is loaded in your browser and may set its own cookies exactly as it would if you visited it directly.

Most browsers let you view, block, and delete cookies through their settings. Blocking the strictly necessary cookies above will sign you out and prevent the app from working. Local storage can be cleared from the same settings, usually under “site data”.

• Google Chrome
• Mozilla Firefox
• Apple Safari
• Microsoft Edge

Signing out of Commento removes your session cookie immediately.

We may update this Cookie Policy as the Service evolves, for example if we add analytics. The date at the top of this page shows when it was last changed, and material changes will be announced inside the Service.

Questions about cookies? Email support@commento.net or use our support centre.