Cookie Policy · Retainr OS

Version: 2026-10-07 · Last updated: 7 October 2026

This policy lists every cookie and browser-storage item Retainr OS sets, and why. It covers getretainr-os.com, app.getretainr-os.com, and the client portal and shared links that studios send from the Service. It is operated by ASLM Digital Solutions (see our Privacy Policy).

The short version

No advertising cookies and no analytics trackers. We do not use Google Analytics or any similar tool, and no third-party advertising tags.
Nearly everything we set is strictly necessary: it keeps you signed in, keeps you secure, or remembers a choice you made. The law (PECR regulation 6, and the ePrivacy Directive in the EU) does not require consent for these.
One category is optional: browser error diagnostics. It runs only if you choose "Accept optional cookies", and you can change your mind at any time from Cookie settings in the page footer.

Strictly necessary cookies

Name
sb-<project>-auth-token (may be split into .0, .1…)
Purpose
Keeps you signed in. Holds your session from our authentication provider, Supabase
Duration
Up to 7 days, refreshed while you are active
Set on
Application, client portal, contractor hub
Name
retainr-os_consent
Purpose
Records your cookie choice (optional diagnostics on or off) and when you made it, so we do not ask again
Duration
180 days
Set on
Client portal and shared pages
Name
retainr-os_plan_intent
Purpose
Remembers the plan and billing interval you picked on the pricing page, so it is still selected at checkout
Duration
24 hours
Set on
Signup
Name
retainr-os_pending_signup, retainr-os_pending_magiclink, retainr-os_pending_recovery
Purpose
Holds the email address a sign-in or reset code was sent to, so the code screen knows which account it is for
Duration
1 hour
Set on
Signup, sign-in, password reset
Name
retainr-os_sign_in_surface
Purpose
Remembers whether you signed in through the client portal or the contractor hub, so you land in the right place. Deleted once read
Duration
Up to 1 hour
Set on
Portal and contractor sign-in
Name
retainr-os_portal_gate
Purpose
Proves you entered a studio's portal passcode, where the studio has set one
Duration
12 hours
Set on
Client portal
Name
__stripe_mid, __stripe_sid
Purpose
Set by Stripe for fraud prevention when you enter card details
Duration
1 year / 30 minutes (Stripe's settings)
Set on
Only the payment page, /signup/plan

Name	Purpose	Duration	Set on
`sb-<project>-auth-token` (may be split into `.0`, `.1`…)	Keeps you signed in. Holds your session from our authentication provider, Supabase	Up to 7 days, refreshed while you are active	Application, client portal, contractor hub
`retainr-os_consent`	Records your cookie choice (optional diagnostics on or off) and when you made it, so we do not ask again	180 days	Client portal and shared pages
`retainr-os_plan_intent`	Remembers the plan and billing interval you picked on the pricing page, so it is still selected at checkout	24 hours	Signup
`retainr-os_pending_signup`, `retainr-os_pending_magiclink`, `retainr-os_pending_recovery`	Holds the email address a sign-in or reset code was sent to, so the code screen knows which account it is for	1 hour	Signup, sign-in, password reset
`retainr-os_sign_in_surface`	Remembers whether you signed in through the client portal or the contractor hub, so you land in the right place. Deleted once read	Up to 1 hour	Portal and contractor sign-in
`retainr-os_portal_gate`	Proves you entered a studio's portal passcode, where the studio has set one	12 hours	Client portal
`__stripe_mid`, `__stripe_sid`	Set by Stripe for fraud prevention when you enter card details	1 year / 30 minutes (Stripe's settings)	Only the payment page, `/signup/plan`

All of our own cookies are first-party, and the ones that do not need to be read in the browser are HttpOnly. The session cookie is not HttpOnly because the application reads it in the browser to keep the session fresh.

Optional cookies and storage

Name
Sentry browser SDK (session storage)
Purpose
Anonymous error diagnostics: if a page breaks for you, the error is reported so we can fix it. Performance tracing is off, and personal data is not attached by default
Duration
Session
When
Only after you accept optional cookies

Name	Purpose	Duration	When
Sentry browser SDK (session storage)	Anonymous error diagnostics: if a page breaks for you, the error is reported so we can fix it. Performance tracing is off, and personal data is not attached by default	Session	Only after you accept optional cookies

Other browser storage

Key
retainr-os.assistant.dictation.optIn
Purpose
Remembers that you opted in to voice dictation on this device
Type
Local storage, strictly necessary for a feature you switched on

Key	Purpose	Type
`retainr-os.assistant.dictation.optIn`	Remembers that you opted in to voice dictation on this device	Local storage, strictly necessary for a feature you switched on

Studios' own policies

A studio that sends you a proposal, contract, invoice or portal link may publish its own privacy and cookie policies. If it does, links appear in the footer of those pages. The studio is responsible for how it uses your data. We process it on the studio's behalf.

Managing cookies

Use Cookie settings in the footer of any client-facing page to change your choice about optional cookies.
You can also block or delete cookies in your browser settings. If you block strictly necessary cookies, signing in and paying will not work.

Changes

If we ever add a new category of optional cookie, we will ask you again before setting it. Your earlier choice does not carry over to a category you were not asked about. We will update this page and its date whenever the list changes.

Contact

support@getretainr-os.com (subject "Privacy"), or ASLM Digital Solutions LLC, 1309 Coffeen Avenue STE 1200, Sheridan, WY 82801, USA.