LEGAL
Cookie Policy
How Congruo AI Ltd uses cookies and similar tracking technologies
1. What Are Cookies?
Cookies are small text files stored on your device when you visit a website. They enable websites to recognise your browser, maintain sessions, remember preferences, and measure how the site is used. Some are essential for a website to function; others are used for analytics or advertising.
2. Our Approach
Congruo AI Ltd uses a consent-first approach. We use three categories of cookies:
- Strictly Necessary — essential for the platform to function. No consent required.
- Marketing and Behavioural — advertising, retargeting, and behavioural tracking for email personalisation. Require your consent.
- Functional — support additional features such as live chat and app preference tracking. Require your consent.
Not in use during beta. No consent banner is shown on congruo.io today, and there is no "Cookie Settings" control in the site footer. This describes what would apply once the banner is enabled: on your first visit it would ask for your preferences, all non-essential cookies would stay off by default and be set only after you give consent, and you would be able to change your preferences at any time via "Cookie Settings" in the site footer. This policy will be updated before that happens.
2.1 Session storage used for analytics (app.congruo.io)
Not everything kept on your device is a cookie. When you go to sign up or log in on app.congruo.io, the app keeps one value in your browser’s session storage while you sign in: the word signup or login, and nothing else. When you return from signing in it is read and deleted straight away, and used only so that our product analytics can tell a sign-up from a log-in. The value itself never leaves your device — our analytics receives only which of the two happened.
This value is set today without asking for your consent. It is not strictly necessary — signing up and logging in work exactly the same without it — so under section 2 it is storage that should require your consent, and none is asked for. We are not describing that gap as anything else. The fix is a tracked change: once our own systems can tell a newly created account from a returning one, the app will no longer need to remember which you came to do, it will stop setting this value, and this section will be removed.
| Name | Where | Purpose | Duration |
|---|---|---|---|
| cg_auth_intent | Session storage, app.congruo.io | Tells product analytics whether you came to sign up or to log in. | Deleted when you return from signing in; otherwise when you close the tab or sign out |
3. Strictly Necessary Cookies
Essential for the Platform to function. Cannot be disabled. Set on both congruo.io and app.congruo.io.
| Cookie | Provider | Purpose | Duration |
|---|---|---|---|
| auth0.* | Auth0 | Maintains your authenticated login session. Set on sign-in; cleared on sign-out or browser close. | Session / 24h |
| auth0.is.authenticated | Auth0 | Stores current authentication status. Speeds up page loads. | 24 hours |
| _csrf | Congruo AI Ltd | Not in use during beta — this cookie is not currently set. Protects against cross-site request forgery attacks. | Session |
4. Marketing and Behavioural Cookies (congruo.io only)
Not in use during beta. None of the cookies in this section are currently set. This section describes what would be used if advertising is enabled: cookies that show relevant ads, build retargeting audiences, measure advertising effectiveness, and personalise communications to visitors. They would be set only with your consent via the cookie banner on congruo.io, never on app.congruo.io, and this policy will be updated before that happens.
4.1 Google Ads
Not in use during beta. These cookies are not currently set. This section describes what would be used if advertising is enabled, and this policy will be updated before that happens.
| Cookie | Purpose | Duration |
|---|---|---|
| _gcl_au | Google conversion linker. Stores and tracks conversions from Google Ads campaigns. | 90 days |
| _gcl_aw | Stores the Google Ads click identifier (GCLID) when someone arrives from a Google Ad. Used to attribute conversions. | 90 days |
| _gcl_dc | DoubleClick conversion linker. | 90 days |
| IDE | Google DoubleClick. Used for targeted advertising and ad effectiveness measurement. | 1 year |
4.2 Meta (Facebook / Instagram)
Not in use during beta. These cookies are not currently set. This section describes what would be used if advertising is enabled, and this policy will be updated before that happens.
| Cookie | Purpose | Duration |
|---|---|---|
| _fbp | Meta Pixel browser identifier. Used to deliver, measure, and improve the relevance of Meta ads. | 3 months |
| _fbc | Stores the Meta click ID (fbclid) when someone arrives from a Meta ad. Used for conversion attribution. | 2 years |
4.3 LinkedIn
Not in use during beta. These cookies are not currently set. This section describes what would be used if advertising is enabled, and this policy will be updated before that happens.
| Cookie | Purpose | Duration |
|---|---|---|
| li_fat_id | LinkedIn first-party ad tracking. Used for conversion attribution and retargeting. | 30 days |
| bcookie | LinkedIn browser identifier for advertising purposes. | 2 years |
| lidc | LinkedIn data centre routing. | 1 day |
| UserMatchHistory | LinkedIn audience matching. Enables LinkedIn to match site visitors with LinkedIn members for ad targeting. | 30 days |
| AnalyticsSyncHistory | LinkedIn Insight Tag sync. | 30 days |
4.4 StackAdapt (Programmatic Display)
Not in use during beta. These cookies are not currently set. This section describes what would be used if advertising is enabled, and this policy will be updated before that happens.
| Cookie | Purpose | Duration |
|---|---|---|
| sa-user-id | StackAdapt visitor identifier for programmatic retargeting. | 30 days |
| sa-user-id-v2 | StackAdapt visitor identifier (v2). | 30 days |
| sa-user-id-v3 | StackAdapt visitor identifier (v3). | 30 days |
4.5 Brevo Tracker (congruo.io)
Not in use during beta. This cookie is not currently set — the Brevo Tracker is not loaded on congruo.io. This section describes what would be used if behavioural tracking for email personalisation is enabled, and this policy will be updated before that happens.
| Cookie | Purpose | Duration |
|---|---|---|
| __brevo_cid | Brevo contact identifier. Identifies returning visitors who have previously received and clicked a Congruo marketing email, enabling personalised email automation based on site behaviour. Does not track anonymous visitors. | 180 days |
5. Functional Cookies
These cookies support additional features. Set only with your consent.
5.1 Brevo Tracker (app.congruo.io)
Not in use during beta. The Brevo Tracker is not loaded in the app, no cookie is set, and the first-login notice described below does not exist. This section describes what would apply once it is enabled, and this policy will be updated before that happens.
Inside the authenticated app, the Brevo Tracker tracks user behaviour on dashboard and non-assessment screens to enable personalised product email automation. Requires functional cookie consent via the first-login notice on app.congruo.io.
| Cookie | Purpose | Duration |
|---|---|---|
| __brevo_cid | Brevo contact identifier inside the authenticated app. Enables personalised product email automation based on dashboard and non-assessment behaviour. Assessment screens excluded. | 180 days |
5.2 Intercom (Customer Support Chat)
Intercom powers our help centre, support inbox and the messenger on the help centre. It sets functional cookies when the messenger loads, so that a conversation you start stays with you across pages and visits. These are Functional cookies under section 5 and are set only when you accept that category.
Intercom is a sub-processor located in the United States; see our Data Processing Agreement for the safeguards that apply. Support conversations never contain your assessment answers, scores or culture data.
6. Google Consent Mode v2
Congruo AI Ltd implements Google Consent Mode v2. It is mandatory for UK and EEA sites that use Google Ads; advertising is not in use during beta, and all advertising signals are denied by default.
| Signal | Default | When you accept Marketing and Behavioural |
|---|---|---|
| ad_storage | Denied | Denied — advertising is not currently in use. |
| analytics_storage | Denied | Permanently denied — GA4 is not used |
| ad_user_data | Denied | Denied — advertising is not currently in use. |
| ad_personalization | Denied | Denied — advertising is not currently in use. |
When signals are denied, nothing loads. We run Consent Mode in its basic form: the Google tag is not loaded at all until you accept, so no request is made, no cookie is set, and no data — modelled or otherwise — reaches Google. There are no cookieless pings and no modelled conversions while consent is denied.
7. Your Consent Choices
7.1 congruo.io (public site)
Not in use during beta. No consent banner appears, there are no Accept All, Reject All Non-Essential or Customise buttons, and no preference is stored or remembered. This section describes what would apply once the banner is enabled, and this policy will be updated before that happens.
On your first visit, a consent banner appears. You can: Accept All (enables Marketing and Behavioural and Functional); Reject All Non-Essential (Strictly Necessary only); or Customise (choose individual categories). Your preference is stored and remembered. Change it any time via "Cookie Settings" in the footer.
We do not infer consent from continued browsing. This is not conditional on the banner and applies today.
7.2 app.congruo.io (authenticated app)
Not in use during beta. There is no first-login notice, and account settings carry no cookie controls. No functional cookies are set in the app, so there is nothing today for the notice to seek consent for. This section describes what would apply once functional cookies are used in the app, and this policy will be updated before that happens.
On first login after account creation, a brief notice explains the functional cookies and Brevo Tracker used in the app. Acknowledging this notice constitutes your consent for functional cookies in the app. You can manage these preferences at any time via account settings.
8. Opting Out via Platform Tools
Advertising is not in use during beta, so there is nothing here to opt out of today. These links are the platforms' own controls, useful if you want to manage advertising across the web.
- Google: myaccount.google.com/data-and-privacy
- Meta: facebook.com/settings/ads
- LinkedIn: linkedin.com/psettings/guest-controls/retargeting-opt-out
- StackAdapt: stackadapt.com/opt-out
- General digital advertising: youronlinechoices.com
9. Managing Cookies in Your Browser
You can control cookies through your browser settings. Blocking strictly necessary cookies will prevent you from logging in to Congruo.
10. Changes to This Policy
We update this Cookie Policy when we add or change tracking technologies. Material changes communicated via email or in-site notice.