1. Scope
This policy explains the cookies, local storage, and session storage used by Asteri LLC ("Asteri") on its public site, booking pages, and signed-in application. Browser storage can remember preferences and hold small records without sending them with every request; cookies may be sent to the relevant domain with a request.
2. Consent Categories
- Necessary: authentication, security, consent enforcement, and core booking operation.
- Functional: optional preferences, dismissed notices, and in-progress drafts.
- Analytics: usage measurement, by Asteri itself and, from December 1, 2026, by PostHog. On the marketing pages it loads or persists only after analytics consent. In the signed-in web app it is on unless you turn it off (Section 5).
- Marketing: campaign attribution and measurement that load or persist only after the applicable marketing choice.
Declining optional categories does not prevent operational contact-form delivery or necessary account and booking functions.
From December 1, 2026, your browser sends error reports to PostHog whether or not you allow analytics. When analytics is off for you, PostHog stores nothing in cookies or browser storage.
3. Current Inventory
| Name | Type | Category | Purpose | Retention |
|---|---|---|---|---|
| asteri-cookie-consent | Cookie | Necessary | Stores the versioned cookie choices and decision time. | 180 days |
| asteri.session_token__Secure-asteri.session_token (including legacy better-auth names) | Cookie | Necessary | Maintains a signed-in session and protects account access. | Session-managed; rotates and expires |
| asteri_active_organization_id | Cookie | Functional | Remembers the active organization for the signed-in workspace. | 30 days |
| asteri-booking-session | Cookie | Necessary | Protects and continues a public booking session. | 6 hours |
| asteri_booking_banner_* | Cookie / local storage | Functional | Remembers a dismissed booking-page announcement for one business. | Until the announcement ends, subject to a bounded maximum |
| sidebar_state | Cookie | Functional | Remembers whether the signed-in navigation sidebar is open. | 7 days |
| asteri-impersonation-* | Cookie | Necessary | Secures a time-bounded, audited administrator support session. | Until the administrator support session expires |
| asteri-themeasteri-color-scheme | Local storage | Functional | Remembers display theme and color preferences. | Until changed or browser storage is cleared |
| asteri:site:v1:consent | Local storage | Necessary | Mirrors privacy choices so the first-party site runtime can enforce them. | Until replaced or browser storage is cleared |
| asteri:site:v1:attribution | Local storage | Analytics / Marketing | Stores consented first- and last-touch campaign attribution. | Up to 30 days; removed when applicable consent is withdrawn |
| asteri_first_visit | Cookie | Analytics | Remembers how you first found the Asteri website (the site, search or campaign link, and the first page), so that if you later book a demo or sign up for an event, our team knows what brought you here. | 30 days; removed when analytics cookies are turned off |
| asteri:site:v1:visitor | Local storage | Analytics | Stores random first-party visitor and session identifiers for consented analytics. | Visitor up to 400 days; session renews after 30 minutes inactivity |
| asteri:site:v1:event-queue | Local storage | Analytics / Marketing | Temporarily retries consented first-party measurement events after a delivery failure. | Up to 24 hours; removed when applicable consent is withdrawn |
| ph_*_posthog | Cookie / local storage | Analytics | From December 1, 2026: PostHog website and product analytics. Holds a random visitor identifier and the current visit, and in the signed-in web app your Asteri user identifier. On the marketing pages, set only after analytics consent; in the signed-in web app, set unless you turn usage analytics off in your account settings or have declined analytics in the privacy banner. | Cookie up to 365 days; local storage until browser storage is cleared. Both removed when analytics is turned off |
| ph_* | Session storage | Analytics | From December 1, 2026: PostHog analytics. Records which browser tab and visit an event belongs to, and can carry a masked screen recording around an error to the next page in the same tab. Set under the same rules as the PostHog analytics cookie above. | Current browser tab session |
| Booking drafts, referrer handoff, and ZIP progress | Session storage | Functional | Preserves in-progress booking inputs and safe navigation context in the current tab. | Current browser tab session or booking completion |
| proposal_session_idproposal_scheduler_*asteri:proposal-addons:*proposal-theme | Local / session storage | Functional | Continues a public proposal review, selected add-ons, scheduling step, and theme. | Current tab for session records; saved selections until replaced or browser storage is cleared |
| asteri:project-share:guest_nameasteri:project-share:comment_secrets:* | Local storage | Functional | Remembers a guest display name and a device-bound secret used to manage shared-project comments. | Until replaced or browser storage is cleared |
| Signed-in interface preferences (asteri-* and workflow-builder-store:organization:*) | Local / session storage | Functional | Remembers selected views, panel sizes, audio devices, recent navigation, and tenant-scoped workspace drafts. | Until completed, changed, sign-out or organization cleanup, or browser storage is cleared |
| Short-lived handoffs and drafts (asteri:*automation-workflow.*chat:draft:*) | Session storage | Functional | Hands in-progress content between signed-in screens without publishing it. | Current browser tab, completion, or sign-out and organization cleanup |
4. Third-Party Payment Storage
Stripe may set its own cookies or browser storage when you open an embedded or hosted payment experience to process a transaction and prevent fraud. Stripe controls that storage under its Privacy Policy. Asteri does not load third-party advertising cookies in the signed-in application.
5. Managing Storage
Use the Asteri privacy banner on the marketing pages to choose optional categories. The signed-in web app does not show the banner: usage analytics there is on unless you turn it off in your account settings, and it also stays off in a browser where you declined analytics in the banner. You can also block or clear cookies and browser storage in your browser settings. Blocking necessary storage may prevent sign-in, booking continuity, payments, or security controls from working. Withdrawing optional consent causes the first-party site runtime to remove the applicable attribution, visitor, and retry-queue records.
6. Changes and Contact
We update this inventory when storage practices materially change. Questions may be sent to privacy@getasteri.com.