Strictly necessary
Required for the product to work. These can't be disabled without breaking core functionality.
| Purpose | Set by | Why we need it |
|---|
| Authentication session | PrimeBase | Keeps you signed in across pages. Without it, you have to sign in on every click. |
| CSRF / security token | PrimeBase | Protects against cross-site request forgery on state-changing requests. |
Functional
Remember your preferences so the product behaves the way you set it.
| Purpose | Set by | Why we need it |
|---|
| UI preferences | PrimeBase | Remembers settings like sidebar state and theme choice between visits. |
| Workspace selection | PrimeBase | Remembers the last workspace you opened so we can take you there on sign-in. |
Analytics
Aggregate, anonymised usage data so we can fix bugs and prioritise what to build. We don't use these to build a profile of you.
| Purpose | Set by | Why we need it |
|---|
| Product analytics | PostHog | Aggregate page views, feature usage, and error rates. Helps us understand what works and what to fix. |
Bot protection
Set only on public-facing forms (lead capture, contact forms) to block automated submissions.
| Purpose | Set by | Why we need it |
|---|
| CAPTCHA challenge | hCaptcha | Stops bots from submitting fake leads or spamming public forms. Only loaded on pages with public forms. |
