1. How we handle consent
On your first visit to this website you are asked whether to allow analytics cookies. Nothing but strictly necessary cookies is set until you choose — no cookie-based analytics loads, and no identifier is assigned to you, before you accept. We do run one cookieless measurement tool that sets nothing and identifies no one; it is described in section 5.
Declining costs you nothing. The site works identically either way, and we do not ask again on every page.
2. Strictly necessary
Set without consent, because the site or application cannot function securely without them. These are exempt from consent requirements under the GDPR’s ePrivacy rules.
| Cookie | Purpose | Duration |
|---|---|---|
turtle_cookie_consent | Remembers your cookie choice, so we stop asking | 12 months |
sessionid | Keeps you signed in to the application | Session |
csrftoken | Protects against cross-site request forgery | 12 months |
3. Analytics — only after you accept
Used to understand which pages are useful and where people get lost. Aggregate patterns, not individual surveillance.
| Cookie | Set by | Purpose | Duration |
|---|---|---|---|
_ga | Google Analytics | Distinguishes visitors | 24 months |
_ga_* | Google Analytics | Maintains session state | 24 months |
We have IP anonymisation enabled, and we do not use Google Analytics for advertising, remarketing or audience sharing.
4. What we do not use
No advertising cookies. No remarketing pixels. No cross-site tracking. No data sold to anyone. We do not run advertising, so we have no reason to build a profile of you.
5. Not cookies, but worth stating
This marketing site uses Umami for basic traffic measurement. It runs on every visit, including before you answer the banner, because it has nothing to consent to: it sets no cookies, stores no identifier, and cannot follow you to any other website. It records the page you viewed, the referring site, and coarse device and country information, all aggregated. If you decline analytics, this still runs; if you would rather it did not, any browser tracking blocker will stop it. It is listed on the subprocessors page.
Our application uses Sentry for error monitoring and New Relic for performance monitoring. These collect diagnostic data — error traces, timings, browser and IP — under our legitimate interest in keeping the Service working. They do not set advertising cookies and are not used to track you across sites. Both are listed on the subprocessors page.
6. Changing your mind
Use the button below to reopen the consent choice at any time. Withdrawing consent stops further collection immediately; cookies already set are cleared where we are able to clear them.
You can also block or delete cookies in your browser settings, and Google offers a browser opt-out add-on for Analytics. Blocking strictly necessary cookies will break sign-in.
7. Questions
Write to legal@turtleaicoworker.com. How we handle personal data more broadly is in the Privacy Policy.
Questions about this document? Write to legal@turtleaicoworker.com.