Legal

Cookies and storage

What this site stores, what it only stores if you accept, and what the product stores in your browser.

Last updated July 31, 2026.

Draft: not yet in force. Ringfully does not yet have an incorporated legal entity, so the party, address and governing law below read [TBD]. This document is published for review and does not bind anyone until those are filled in and it has been through a lawyer.

1This website sets nothing until you answer

Before you answer the banner, ringfully.com sets no cookies and stores nothing in your browser. No advertising pixel. No session recorder, no heatmap, no chat widget. Typefaces are served from our own domain rather than fetched from a font service.

Nothing from Google loads before you answer, either. The Google Analytics script is not part of the page. It is added only after you choose “Accept all”, and never while your browser sends Global Privacy Control or Do Not Track. An earlier version of this site fetched it on every visit so that Google’s own setup check could see the tag; that request reached Google with your IP address and the page you were on before you had answered, and it no longer happens.

If you choose “Accept all”, one thing is added: Google Analytics 4. It counts visits and records which pages are read. It is configured for measurement only (advertising storage, ad personalisation and ad user data are all denied), and it is the only analytics on this site.

If you choose “Essential only”, Google Analytics does not load. No script is fetched, no _ga cookie is set and no identifier is kept, so there is nothing to recognise you by on a later visit. If you accepted earlier and change your mind, the tag is switched off in the page you are on and is not loaded again; a Google Analytics cookie it already set stays in your browser until you clear it or it expires.

It is checked rather than promised. An automated test loads every page on the site, in both languages, and asserts that local storage, session storage and cookies are all still empty until the banner is answered, and a second test asserts that accepting is what loads analytics, and declining is what keeps it absent. If somebody adds a tracker outside that gate, those tests fail and this page has to change with it.

What is stored once you answer:

ringfully_consent	Which answer you gave the cookie banner, when, and whether it came from a browser opt-out signal rather than a click.Necessary: it is what stops us asking again
_ga · _ga_G-B8HWSMQCHD	Google Analytics 4. A random identifier used to tell one visit from another and one session from the next. Set by Google, readable by Google, and present only if you chose “Accept all”. Two years and two years.Optional: declined by default, and absent entirely if you did not accept

2Then why is there a banner?

Because Google Analytics is storage that is not necessary, and consent obligations attach to exactly that. When this page was first written the honest answer was that nothing here legally required a banner; adding analytics is what changed it.

It is there anyway, built as a real control rather than a reassuring graphic. Your answer is the gate the analytics script has to pass, and it cannot load for someone who chose essential-only. The two answers do genuinely different things.

If you arrive with Global Privacy Control or Do Not Track switched on, you are not asked at all: you have already answered, and we record the decline. You can change your mind from “Cookie preferences” in the footer at any time.

Adding analytics was a new purpose, so answers given to the earlier banner, which described a site that loaded nothing optional, were discarded rather than carried over, and everyone was asked again. The same applies to anything added in future.

3The signed-in product

Once you sign in the software has to remember things. Here is all of it: two cookies and nine entries in your browser’s local storage. None of it is analytics, and none of it is shared with anyone.

rf_platform_at · rf_platform_rt	Cookies. The operator console's session, which is ours rather than a customer's. 15 minutes and 30 days. Both HttpOnly, SameSite=Lax, and Secure in production, so the page's own JavaScript cannot read them.Necessary
ringfully_admin_session	Your access and refresh tokens, plus your name, email, role, organization and permissions. Worth saying plainly: this is not an opaque token. Your name and email are in your browser's storage.Necessary
ringfully_admin_theme	Light or dark, because you chose it.Necessary: you asked for it
ringfully_admin_recent_nav	The last five pages you opened in the portal, so the ⌘K palette can offer them back. It stays in your browser and is never sent to us, but it is a record of what you looked at, so it belongs on this list.Not strictly necessary: a convenience
ringfully.audio.input · .speaker · .ringtone	Which microphone, speaker and ringtone device you picked. Device ids mean nothing on another machine, which is why these stay local rather than following your account.Functional: you set them
ringfully.audio.sound.incoming · .outgoing · .disconnect	Whether each call sound is on.Functional: you set them

Everything above except the recent-pages list is either required to keep you signed in or a setting you chose. Clearing your browser storage signs you out and resets those settings, which is the whole of the consequence.

4Do Not Track, and Global Privacy Control

California requires a site to say how it responds to a Do Not Track signal. Ours: where it appears, we treat it as a decline without asking, and Google Analytics is not loaded, even if you accepted it earlier. The same goes for Global Privacy Control.

Questions: [email protected]. What we hold once you are a customer is a much longer subject and is on the privacy policy; to ask for a copy of it, see making a request.