Cookie Notice (Cookies & Similar Technologies)

Effective date: 10 Jan 2026

1) Overview

On our website and in our SaaS platform 36leads, we use only strictly necessary cookies and similar technologies that are required for login/session management and basic functionality. For these strictly necessary storages, a cookie consent is generally not required; however, we provide transparent information about their use.

2) Which cookies do we set?

Strictly necessary cookies (provider: Clerk)

We use Clerk as our authentication provider. These cookies serve, among other things, authentication (authenticity tokens) and session management (session tokens) to manage your login status and enable the use of protected areas.

Examples (may vary depending on browser/session):

  • __clerk_db_jwt (and similar Clerk cookies)
  • __client_uat (and similar Clerk cookies)

Category: strictly necessary (login/security/session)
Retention period: depending on the cookie, session or short-term persistent (to maintain login status)

3) Which "similar technologies" do we use?

In addition to cookies, Local Storage entries may be stored in your browser (storage within the browser). In our technical analysis, the following entries were identified, among others:

Local Storage (Clerk / technical function):

  • __clerk_environment – configuration data of the Clerk instance (e.g., sign-in/sign-up URLs, public keys, themes)
  • clerk_telemetry_throttler – technical telemetry timestamps for internal control/throttling of requests

Local Storage (display/accessibility):

  • ally-supports-cache – a technical cache for accessibility/A11y support functions

Session Storage (audience measurement, marketing pages only):

  • ph_<project-id>_posthog – holds a random session identifier so that several page views within the same browser tab are counted as one visit. Session storage is deleted by the browser when the tab is closed, is never sent to the server, and does not allow recognition on a later visit. If session storage is unavailable, the identifier is kept in memory only; no cookie is set in either case.

These storages serve technical functionality, display, and anonymous audience measurement. They are not used for advertising or cross-device profiling.

4) Audience measurement, no marketing tracking

No advertising tracking: we do not use Google Analytics, the Facebook/Meta Pixel, or the LinkedIn Insight Tag. There is no cross-device recognition, no retargeting, and no sharing of data with advertising networks.

On our public marketing pages we measure audience data with PostHog (PostHog EU, processed within the EU). We record which pages are opened, time on page and scroll depth, which elements are clicked, and technical context such as browser type, device type, approximate region, and the referring site. The data is sent to PostHog through our own domain.

The setup is deliberately minimal:

  • no cookies
  • the session identifier lives only in the session storage of the current browser tab (see section 3); there is no persistent visitor ID
  • no session replay, no screen recording
  • form inputs are not captured; personal values in URLs and parameters are stripped before the data is sent
  • signed-in areas of the application are excluded from measurement

The legal basis is our legitimate interest in designing our website to meet actual demand (Art. 6(1)(f) GDPR). As no identifier is stored beyond the session, we treat this as strictly necessary, data-minimising audience measurement. You can object at any time by enabling "Do Not Track" in your browser or by blocking third-party scripts.

5) Consent & legal framework (short overview)

For cookies/storage that are not strictly necessary (e.g., tracking/marketing), prior consent is generally required in the EU/UK. For strictly necessary cookies, exemptions apply; nevertheless, transparent information should be provided.

6) How can you control cookies/local storage?

You can, in your browser:

  • view, delete or block cookies and website data (browser settings)
  • use private/incognito mode where available

Please note: If you block strictly necessary cookies/storages, login or certain functions may not work.

7) Changes

We may update this cookie notice if our technologies change (e.g., if we change the scope of our audience measurement). The current version is always available on this page.

Cookie Notice | 36leads