Cookie & Local Storage Disclosure
Anteriq (“we,” “us,” or “our”) operates a practice management and client operations platform for financial planning firms (the “Portal”). This disclosure explains how the Portal uses browser storage — cookies and local/session storage — and what that means for you.
1. What Is Browser Storage?
Browsers provide several mechanisms that allow websites to store small pieces of data on your device:
- Cookies — small text files a website can set and read across requests. Cookies can persist beyond the browser session (“persistent cookies”) or expire when you close the tab/browser (“session cookies”).
localStorage— key/value storage that persists on your device until explicitly cleared, even after you close the browser.sessionStorage— key/value storage that exists only for the lifetime of the current browser tab; it is erased automatically when the tab is closed.
Anteriq’s own servers set no cookies — no response from the Anteriq application or its content delivery network carries a Set-Cookie header, and all session state is held in browser-side storage. A small number of cookies are nonetheless set in your browser by the third-party services described in Section 4, which run on the pages where they are used.
2. What Anteriq Uses
The Portal uses only storage that is strictly necessary to operate the service securely and correctly. No advertising, analytics, or cross-site tracking storage is used.
2a. Authentication & Session Tokens (localStorage)
The Portal authenticates users through Amazon Cognito via AWS Amplify. Amplify stores the following in localStorage for client (end-user) sessions:
- Cognito JWTs —
id_token,access_token,refresh_token, and related metadata, stored under keys of the formCognitoIdentityServiceProvider.<client app-client id>.<username>.idToken,…accessToken,…refreshToken, and similar Amplify internal keys. - These tokens authenticate subsequent API calls and allow the Portal to restore your session when you return to the browser.
- Tokens expire per the Cognito pool configuration; the
refresh_tokenhas a longer life and is used to silently renew the short-livedaccess_token.
Purpose: Authentication and session continuity. Without these, you cannot stay signed in.
2b. Admin Authentication Tokens (sessionStorage — security-scoped)
For administrator sessions, Amplify tokens are stored in sessionStorage rather than localStorage. This is a deliberate security measure: scoping tokens to the tab prevents a cross-site scripting attack from reading admin credentials out of the longer-lived localStorage. Admin tokens are erased automatically when the browser tab is closed.
Admin-pool tokens are stored in sessionStorage under keys of the form CognitoIdentityServiceProvider.<admin app-client id>.<username>.idToken, …accessToken, …refreshToken, and similar Amplify internal keys — analogous to the client-pool pattern above but scoped to sessionStorage.
On sign-in, the Portal also clears any administrator token keys that may remain in localStorage from an earlier version of the app, so a stale admin credential cannot persist outside the tab-scoped storage described above.
2c. UI Preference (localStorage)
| Key | Purpose |
|---|---|
cp_theme |
Stores your selected color theme (light/dark/system). Persists across sessions. |
an.adminSidebar.collapsed |
Stores whether the admin sidebar is collapsed ("0" or "1"). Admin surface only. Persists across sessions. |
Purpose: Restore your interface preferences without requiring a server round-trip.
2d. Navigation & Flow State (sessionStorage — tab-scoped)
The following keys are written to sessionStorage to coordinate navigation and short-lived interface state within a single browser session. Most are consumed and removed immediately after use; a banner-dismissal preference instead persists until the tab or browser session ends.
| Key | Purpose |
|---|---|
clientPortal.postLoginRedirect |
Stores the URL a client was trying to reach before being redirected to login, so they land on the right page after signing in. |
loginBanner |
Stores a one-time informational message (e.g., “Sign in first”) to display on the login page after a redirect. |
impersonation_token |
Holds a short-lived token allowing a platform administrator to impersonate a firm for support purposes (requires explicit firm consent). Scoped to the tab; erased on sign-out or tab close. |
pendingBillingClientId |
Stores the client ID during a cross-page billing navigation (admin surface). Consumed on mount; not persisted. |
pendingBillingSubTab |
Stores the target billing sub-tab during the same navigation. Consumed on mount; not persisted. |
an-plan-banner-dismissed:<firm slug>:<banner type> |
Records that you dismissed a specific plan-status banner (for example, a trial-ending or card-expiring notice), so it does not reappear for the rest of the browser session. One key per firm and banner type. Admin surface only. |
Purpose: Functional session coordination only. None of these values are shared with third parties or used to track behavior across sites.
3. What Anteriq Does NOT Use
Based on inspection of the Portal’s source code:
- No advertising or marketing cookies or trackers. We do not use Google Ads, Meta Pixel, TikTok, LinkedIn Insight Tag, or similar ad-network pixels.
- No cross-site tracking. We do not set identifiers designed to follow you across other websites.
- No third-party analytics or behavioral trackers. We do not embed Google Analytics, Mixpanel, Segment, Heap, Hotjar, FullStory, PostHog, or equivalent tools.
4. Third-Party Services Used in the Portal
Three third-party services run inside the Portal. Each is functional — necessary to a feature you are using — and none performs advertising or cross-site tracking.
| Service | When it loads | What it receives |
|---|---|---|
| Stripe | Pages where a payment card is entered or a subscription is managed | Payment-card details typed into Stripe’s own fields, and device and browser signals used to detect fraud. Stripe sets its own cookies for this purpose |
| BoldSign | The signing view, when a document has been sent to you for electronic signature | The signing session and the document being signed, within its own frame |
| Calendly | The scheduling page, and only if your firm has supplied a Calendly booking link | Your name and email address, your IP address and browser information, and any booking details you enter |
Stripe describes the cookies it sets as essential ones, used for secure access, page navigation, and fraud detection and prevention; details are in Stripe’s cookies policy. If your firm has not supplied a Calendly booking link, the Portal never contacts Calendly at all.
5. Consent Banner
Because the Portal uses only essential and functional storage — storage necessary to authenticate you, maintain your session, restore your interface preferences, and operate the third-party features described in Section 4 — we do not display a cookie-consent banner. None of the storage described in this disclosure is used for advertising, behavioral profiling, or tracking you across other websites.
If this changes — for example, if analytics or marketing tools are added — a consent banner and opt-out mechanism will be introduced before those tools are activated.
6. Managing Browser Storage
You can view, edit, or delete localStorage and sessionStorage entries using your browser’s developer tools (typically under Application → Storage). You can also clear all site data via your browser’s privacy or history settings.
Note: Clearing or blocking localStorage will remove your Cognito session tokens, signing you out. Blocking sessionStorage entirely may prevent login redirects from functioning correctly. The Portal does not support a “cookie-free” operating mode; some storage is required for the authentication flow to work.
7. Changes to This Disclosure
We may update this disclosure when the Portal’s storage usage changes. The “Last updated” date shown with this disclosure indicates when it was most recently changed.
8. Contact & Privacy Policy
For questions about how we handle your data more broadly, see the Anteriq Privacy Policy.
To contact us: privacy@anteriq.com · 11479 S Pine Dr, Parker, CO 80134