01
Strictly necessary
Security and sign-in storage needed to provide the service and protect sessions.
Law. Open to all.
A practical inventory of the browser cookies and storage SQRIB uses or plans to use.
01
Security and sign-in storage needed to provide the service and protect sessions.
02
Optional first-party storage that remembers interface preferences on this browser.
03
Analytics cookies and storage are optional. Google tools may still send measurements without these cookies when Analytics is off.
04
Allows Google, Meta, and LinkedIn to use cookies and browser storage and receive data to measure campaigns and show personalized ads, including ads on other sites after you visit SQRIB (remarketing). Off unless you agree; you can withdraw at any time.
This table covers SQRIB service storage and the planned GA4, Google Ads conversion and remarketing tags, Meta Pixel, and LinkedIn Insight Tag. It does not cover server-side case files, uploaded documents, or Engine data.
The planned tag inventory remains subject to verification against the published configuration. Not every item is set for every visitor: this depends on the feature, consent choices, and browser restrictions. Lifetimes are provider defaults or documented periods and may be shortened by browsers, privacy settings, or other technical factors.
| Category | Key or name | Provider | Type | Purpose | Retention | Required |
|---|---|---|---|---|---|---|
| Registration continuity | sqrib.registrationNavigationHandoff.v1:<user_id> | SQRIB | sessionStorage | Stores a user-specific flag to open desktop navigation and recent cases once after guest registration. Remembers when this has been done to prevent repeated expansion. Contains no case content and does not depend on optional consent. | Until you sign out, close the tab, or clear browser storage. The used flag is retained for the rest of the tab session to prevent repeated expansion. | Required |
| Subscription continuity | sqrib.subscriptionIntent.v1 | SQRIB | sessionStorage | Keeps your selected plan, billing period and a one-time attempt identifier in this tab while you register or sign in. Contains no payment details. | Valid for 30 minutes. Removed when used, cancelled or logged out, or when the tab closes; expired entries are discarded when read. | Required |
| Draft continuity | sqrib.landingHandoff.v1 / sqrib-landing-handoff | SQRIB | sessionStorage / IndexedDB | Temporarily keeps your pending question and selected files in this browser while moving from the homepage to your workspace. The tab stores an opaque reference and whether submission is paused; file content is kept in IndexedDB. No upload occurs during handoff. | Expires after 30 minutes. Removed on submission acceptance, discard or logout; expired records are deleted while the site is open or on the next visit. | Required |
| Consent | sqrib.optionalConsent | SQRIB | localStorage / first-party cookie | Stores this browser’s Functional, Analytics, and Marketing consent choices. A cookie mirrors the choice so the server can enforce Analytics consent during authentication; it contains no user identifier. | localStorage: until changed or cleared. Cookie: 1 year, renewed when saved choices are applied; removed when the saved choice is cleared. | Required |
| Preference | sqrib.locale | SQRIB | First-party cookie | Remembers the selected interface language on this browser. | 1 year, renewed when the language preference is saved; may be cleared earlier. | Required |
| Preference | sqrib.homePanelLayout.v1 | SQRIB | localStorage | Remembers the user-adjusted Chat and Case panel split on this browser. | Until changed, reset, or browser storage is cleared. | Optional |
| Transaction continuity | sqrib.guidancePaymentContinuity.v1:<case_id> | SQRIB | sessionStorage | Temporarily preserves the selected SQRIB Certification intent and optional additional context while the user completes a credit purchase. | Until the SQRIB Certification request is submitted, the flow is explicitly cancelled, the browser tab closes, or browser storage is cleared. | Required |
| Transaction continuity | sqrib.documentPaymentContinuity.v1:<case_id> | SQRIB | sessionStorage | Keeps the selected document format, title and payment identifiers while you buy credits. It does not create a document automatically. | Until the flow is closed, the document is generated, you sign out, or the tab closes. Unused drafts expire after 24 hours. | Required |
| Transaction continuity | sqrib.expertConsultationAttempt.v1:<case_id> | SQRIB | sessionStorage | Keeps one stable request-attempt identifier across retries or a page refresh so an Expert Consultation is not submitted twice. | Until the request succeeds, an existing request is detected, the browser tab closes, or browser storage is cleared. | Required |
| Analytics / Marketing | sqrib.consultationPaymentTracking.v1:<consultation_id> | SQRIB | sessionStorage | Correlates an initiated consultation payment with its confirmed booking and prevents duplicate completion events. Stored only with Analytics or Marketing consent; no card details. | Until the tab closes, sign-out, storage is cleared, or both consents are withdrawn. Pending payments are matched for up to 24 hours. | Optional |
| Maintenance | sqrib.resetVersion | SQRIB | localStorage | Records the last applied deployment reset so the one-time browser state reset runs only once per release. | Until cleared or replaced by a newer reset version. | Required |
| Authentication analytics | sqrib.authAttempt.<state-hash> | SQRIB | Encrypted first-party HttpOnly cookie | Preserves the original registration or sign-in choice and, when applicable, the intended service, entry point and opaque case reference for one authentication attempt. Contains no case content. Stored only with Analytics consent; the successful callback hands short-lived attribution to the encrypted session until consumed. | Up to 15 minutes; removed on the matching authentication callback, sign-out or authentication reset or consent withdrawal. | Optional |
| Authentication analytics | sqrib.authConsumed.<kind>.<receipt-id> | SQRIB | First-party HttpOnly cookie | Prevents an already-consumed authentication or service-referral event from being sent again after a late session response. Contains only an opaque receipt identifier and a consumed flag, not account or case data. Stored only with Analytics consent. | Up to 10 minutes for authentication or 15 minutes for service referrals; removed on sign-out, authentication reset or consent withdrawal. | Optional |
| Authentication | authjs.* | SQRIB / Auth.js | HTTP cookie | Supports sign-in, session continuity, CSRF protection, callback handling, and sign-out. | Session or Auth.js configured session lifetime. | Required |
| Identity provider | Entra ID cookies | Microsoft Entra External ID | HTTP cookie | Supports Microsoft-hosted sign-in, account creation, identity security, and fraud prevention. | Managed by Microsoft during the identity flow. | Required |
| Analytics | _ga | First-party cookie | Distinguishes individual visitors to measure product usage across sessions. | 2 years by default | Optional | |
| Analytics | _ga_<container-id> | First-party cookie | Stores the current session state to measure how a visit unfolds. | 2 years by default | Optional | |
| Marketing | _gcl_au | Google Ads | First-party cookie | Stores ad-click information to attribute a later sign-up to the ad that brought the visitor to the site. | 90 days | Optional |
| Marketing | _gcl_aw | Google Ads | First-party cookie | Stores the specific ad-click ID to match a conversion to the campaign that generated the click. | 90 days | Optional |
| Marketing | IDE | Third-party cookie (doubleclick.net) | Supports advertising on other sites, including ad selection and limiting how often an ad is shown. | 13 months in the EEA, Switzerland, and UK; 24 months elsewhere | Optional | |
| Marketing | test_cookie | Third-party cookie (doubleclick.net) | Checks whether the browser accepts cookies before advertising features run. | 15 minutes | Optional | |
| Marketing | _fbp | Meta | First-party cookie | Identifies the browser to measure and improve advertising shown to the visitor. | 90 days | Optional |
| Marketing | _fbc | Meta | First-party cookie | Stores a Meta ad-click identifier to attribute a later sign-up to that ad. | 90 days | Optional |
| Marketing | fr | Meta | Third-party cookie (facebook.com) | Supports Meta advertising and measurement. | 90 days | Optional |
| Marketing | li_adsid | First-party browser storage (not a cookie) | A pseudonymous identifier that helps attribute sign-ups to LinkedIn ads. Used outside the EU, EEA, Quebec, and UK. | 6 months | Optional | |
| Marketing | li_fat_id | First-party cookie | An indirect identifier for conversion tracking, retargeting, and analytics. | 30 days | Optional | |
| Marketing | bcookie | Third-party cookie (linkedin.com) | Recognises a browser across visits, including for abuse detection and diagnostics. | 1 year | Optional | |
| Marketing | bscookie | Third-party cookie (www.linkedin.com) | Remembers that a signed-in LinkedIn user was verified using two-factor authentication. | 1 year | Optional | |
| Marketing | lidc | Third-party cookie (linkedin.com) | Routes LinkedIn requests to the appropriate data centre. | 24 hours | Optional | |
| Marketing | li_gc | Third-party cookie (linkedin.com) | Stores the visitor's choice about LinkedIn's own non-essential cookies. | 6 months | Optional | |
| Marketing | li_mc | Third-party cookie (linkedin.com) | Caches the visitor's LinkedIn cookie choice to reduce repeated lookups and enforce that choice. | 6 months | Optional | |
| Marketing | li_sugr | Third-party cookie (linkedin.com) | Supports probability-based visitor matching when a direct match is unavailable. | 90 days | Optional | |
| Marketing | UserMatchHistory | Third-party cookie (linkedin.com) | Records when advertising identifiers were last synchronised to avoid unnecessary repeat synchronisation. | 30 days | Optional | |
| Marketing | AnalyticsSyncHistory | Third-party cookie (linkedin.com) | Records when analytics data was last synchronised. | 30 days | Optional | |
| Marketing | lms_ads | Third-party cookie (linkedin.com) | Identifies a LinkedIn member outside LinkedIn to personalise ads and measure campaigns. | 30 days | Optional | |
| Marketing | lms_analytics | Third-party cookie (linkedin.com) | Identifies a LinkedIn member outside LinkedIn for analytics reporting. | 30 days | Optional |