Cookie Policy

Last updated: 29 July 2026  |  FrameLogic Limited (Companies House: 17193146)

This Cookie Policy explains what cookies and similar technologies are used on Autera and how to control them. It forms part of our Privacy Policy.

1. What are cookies?

Cookies are small text files stored by your browser when you visit a website. They are used to remember your preferences, keep you signed in, and help websites function correctly. Similar technologies include local storage, session storage, and pixel tags.

2. Cookies we use

Strictly necessary (always on)

These cookies are required for the service to work. They cannot be disabled while using Autera.

• __gs_portal: secure authentication session for workshop users (HTTP-only, SameSite=Lax, expires after 7 days).
• c_session: secure authentication session for customers viewing invoices, quotes and bookings via their workshop’s customer portal (HTTP-only, SameSite=Strict, 30 days).
• __gs_admin: authentication session for the internal admin area (HTTP-only, expires after 24 hours).
• portal_site_id: remembers the active site selection for multi-site workshops (HTTP-only, SameSite=Lax, 365 days).
• autera_ref: 30-day referral attribution. Set when a visitor clicks a ?ref=XXXXXX link. Necessary for the referral-reward feature; not used for advertising tracking.
• gos_cookie_consent: stores your decision on this banner so we do not show it again. 1 year, SameSite=Lax.
• Cross-site request forgery (CSRF) protection: provided by the SameSite attribute on the authentication session cookies listed above. Autera does not set a separate CSRF token cookie.

Analytics (optional)

We use minimal first-party analytics to understand which features are used most and where users encounter issues. This helps us improve the product. Analytics events are aggregated and do not identify you personally to third parties. None of these are set before you accept the cookie banner.

• PostHog (ph_* family): product analytics, autocapture and session replay. Only loaded after consent. PostHog privacy policy.
• autera_attr: first-touch acquisition record for the marketing site. Stores the campaign tags or ad click ID on the URL you arrived with, the site that referred you, and the first page you landed on, so we can tell which channels bring garages to Autera. 90 days, SameSite=Lax. Set only after consent, and never overwritten once set.
• Sentry: error-tracking session cookies set when an exception is reported (only on pages that throw an error). Sentry privacy policy.

Third-party embeds

The following providers set their own cookies when their UI is rendered on Autera. They are loaded only on the specific pages that use them.

• Calendly: embedded on the demo booking page. Calendly cookies are set inside the booking widget; Calendly shows its own consent notice to EU/UK users. Calendly privacy policy.
• Cloudflare Turnstile: CAPTCHA on the signup form. Sets a per-challenge token; used only to verify you are not a bot. Cloudflare privacy policy.
• Stripe: payments and checkout. Stripe sets fingerprinting cookies on its own hosted checkout pages, not on getautera.com itself. Stripe privacy policy.
• Trustpilot: linked in the footer for public reviews of Autera. Trustpilot may set cookies on its own domain when you click through. We use Trustpilot’s Automatic Feedback Service (AFS) to invite recent customers to leave a review by email; the invite is sent by us from getautera.com and Trustpilot follows up with its own review form. Trustpilot privacy policy.

Advertising (optional)

We advertise Autera on Google. To know which adverts are worth paying for, we need to see whether a click ended in a sign-up, so we run Google’s tag. It is off until you accept the banner, and declining costs you nothing on the site.

• Google Ads (_gcl_* on getautera.com, plus cookies on doubleclick.net and google.com): records that a visit led to a sign-up and links it back to the advert that brought you here. Google may also add you to a remarketing audience, which means you could see an Autera advert elsewhere on the web. How Google uses cookies.

Google’s tag is not loaded at all until you accept, so before you make a choice nothing is written and nothing is sent to Google. We also run it only on our public marketing and legal pages, never on a page reached through a private link we sent you, and never inside your workshop account. We do not show adverts on Autera itself, and we do not sell your personal data to anyone.

3. Managing cookies

• Cookie banner: on your first visit to the marketing site (getautera.com) you will see a cookie consent banner with two options: “Accept all” (analytics and advert-measurement cookies) or “Reject non-essential” (essential cookies only). Strictly necessary cookies are always set either way. You can revisit and change your choice at any time using the “Cookie settings” link in the footer; if you switch from accept to reject, we stop analytics tracking and Google’s tag is not loaded again.
• Browser controls: all major browsers let you manage cookies in their settings. You can block all cookies, block third-party cookies only, or delete existing cookies. See aboutcookies.org for guides.
• Disabling necessary cookies will prevent you from signing in to Autera.

4. Local storage

We use browser local storage to remember UI preferences (such as your dark-mode toggle, when re-enabled in a future release) and to cache certain non-sensitive interface data. Local storage entries do not contain personal data.

5. Changes to this policy

We may update this Cookie Policy from time to time. The “Last updated” date at the top of this page reflects the latest version.

6. Contact

Cookie or privacy queries: [email protected]