Cookie Policy
Effective date: 17 July 2026
1. What this policy covers
This policy explains what cookies and similar browser storage SyncingBeam uses, both on this marketing website (syncingbeam.app) and in the authenticated application our customers sign in to. It is maintained by SyncingBeam; questions go to [email protected].
2. What cookies are
Cookies are small text files a website asks your browser to store, so the site can recognize your browser on later requests — for example, to keep you signed in. Browsers also offer other storage, such as sessionStorage, which stays on your device and is never sent to the server; where we use that, it is noted below.
3. Cookies on this marketing website
This marketing website uses essential cookies only. Optional journey tracking is off unless you accept in Journey tracking settings. When enabled, the tracker stores your choice under beam_journey_consent and a journey identifier under beam_journey_id in browser local storage; it does not set an analytics cookie. If you submit a form while tracking is allowed, the visited page URLs and timestamps may be linked to your contact record in Arimatics' self-hosted customer-management service. This optional page history does not use a third-party pixel or session replay. We set no advertising cookies and no third-party cookies, on this site or in the application.
4. Cookies in the authenticated application
When a customer signs in to the SyncingBeam application, our sign-in system sets strictly necessary session cookies. These exist solely to keep you signed in and to protect the sign-in flow against forgery; they are not used for tracking or advertising. Because every cookie we set is strictly necessary for a service you explicitly request, no cookie consent banner is required — there is nothing optional to consent to.
5. The cookies we set
| Name | Purpose | Duration |
|---|---|---|
| __Secure-authjs.session-token | Keeps you signed in to the application after you sign in (strictly necessary). | Up to 30 days |
| __Secure-authjs.csrf-token | Protects the sign-in flow against cross-site request forgery (strictly necessary). | Browser session |
| __Secure-authjs.callback-url | Remembers the page to return you to after signing in (strictly necessary). | Browser session |
These cookies are set only in the application, not by browsing this marketing site. (In non-production environments the names appear without the __Secure- prefix.)
6. sessionStorage on the marketing site (not a cookie)
The homepage animation plays once per visit. To remember that it has already played, the page stores a single flag in your browser's sessionStorage. This is not a cookie: it contains no personal data, it is never sent to our servers, and your browser deletes it when you close the tab.
7. Managing cookies
You can block or delete cookies in your browser settings at any time. Note that the cookies above are strictly necessary for signing in: blocking them will prevent the application sign-in from working. The marketing website remains fully usable with all cookies blocked. You can change or withdraw journey tracking consent from Journey tracking settings on the marketing website, or clear its local-storage entries in your browser.
8. Changes to this policy
Any change to cookies or similar browser storage will be reflected on this page, with a new effective date, before the change takes effect. Questions: [email protected].