This page lists every cookie and every similar browser-storage entry that LadderKit uses, what each one is for and how long it lasts.
This website
The LadderKit website you are reading sets no cookies. It stores one thing in your browser, and only if you pick a language in its language menu: that choice, so the site opens in your language next time. Until you pick one, it follows your browser's language and stores nothing. That entry only remembers something you asked for, so it needs no consent. The site uses no analytics, and its fonts are served from our own server, so loading a page sends no requests to anyone else. That is also why it shows no cookie banner.
| Name | Type | Purpose | Duration |
|---|---|---|---|
| ladderkit | Local storage | Remembers the language you chose in this website's language menu. Set only when you choose one. | Until you clear your browser storage |
The LadderKit app
The app sets only what it needs to work: one cookie that keeps you signed in, a few short-lived cookies — while you sign in with Google or Microsoft, approve LadderKit for a Microsoft organisation, or connect Slack as an administrator — your settings in the browser's local storage and, in the public demo only, one entry in its session storage.
| Name | Type | Purpose | Duration |
|---|---|---|---|
| __Host-refresh_token | Cookie (HttpOnly, Secure, SameSite=Strict) | Keeps you signed in, so you do not have to sign in on every visit. | 30 days, renewed while you use the app; removed when you sign out |
| __Host-sso_state | Cookie (HttpOnly, Secure, SameSite=Lax) | Protects the round trip to Google or Microsoft — signing in, connecting your organisation, or approving LadderKit for a Microsoft organisation — against forged requests. For the round trip it carries where to return, a pending invitation, your language and time zone, and — when an administrator connects the organisation — which account and organisation started it. | 10 minutes |
| __Host-sso_pending_signup | Cookie (HttpOnly, Secure, SameSite=Strict) | Remembers a sign-up you started with Google or Microsoft until you finish it. | 15 minutes |
| __Host-sso_pending_connect | Cookie (HttpOnly, Secure, SameSite=Strict) | Remembers an administrator connecting Google or Microsoft sign-in for the organisation until it is finished. | 15 minutes |
| __Host-slack_install | Cookie (HttpOnly, Secure, SameSite=Lax) | Ties an administrator’s “Add to Slack” connection to the browser that started it, so no one else can complete it. | 10 minutes |
| i18nextLng | Local storage | Remembers the interface language you chose. | Until you clear your browser storage |
| ladderkit | Session storage | Only in the public demo: remembers that the welcome and guided tour were already offered in this tab, so reloading the page does not show them again. | Until you close the tab |
“Secure” is set in production, where the app is served only over HTTPS: the browser then sends these cookies over encrypted connections only.
Set by others
On the billing page only, the payment form is provided by Stripe, which sets its own cookies to prevent fraud and keep payments secure. Stripe decides their names and lifetimes. Stripe cookie policy
No cookie banner
Everything listed above is strictly necessary for the app to work or remembers a setting you chose, so the law does not require your consent for it and the app does not ask. It uses no analytics, advertising or tracking. Sentry, our error-monitoring service, receives technical details of errors that occur, but stores nothing in your browser.
How to control them
You can delete or block cookies and site data in your browser settings at any time. If you block the session cookie, you will be signed out and will need to sign in on every visit.
Questions
If you have questions about this policy, write to us at info@ladderkit.com.