Cookie Policy
Last updated: October 7, 2026
This Cookie Policy explains how Attorly (operated by Getia AS) uses cookies and similar technologies when you visit our website. We use cookies to ensure our website works properly and to improve your experience. We use GetCookies.co to manage your cookie consent preferences.
Cookie Consent
On your first visit you will see a cookie consent banner. You can accept everything, reject everything non-essential, or open "Customize" to turn categories on and off individually. We persist your decision for one year; if we change the scope of processing, the banner re-appears so you can give fresh consent.
- Strictly necessary — Signing in and its security steps, CSRF protection, your language, time zone and menu preferences, and the consent record itself. Always enabled under ePrivacy Art. 5(3).
- Analytics — Google Analytics 4 and Google Tag Manager. Helps us see which pages are useful and which are broken. Set only with your consent.
- Marketing — Campaign attribution. Lets us measure which marketing channels bring people to Attorly. Set only with your consent.
What Are Cookies
Cookies are small text files that are placed on your device when you visit a website. They are widely used to make websites work efficiently and to provide information to website owners. Cookies can be 'session' cookies (deleted when you close your browser) or 'persistent' cookies (remain on your device for a set period).
Strictly Necessary Cookies
These cookies are essential for the website to function properly. They cannot be disabled as the website would not work correctly without them. The session cookie identifies your signed-in account, and its contents are encrypted. None of these cookies is used for advertising or to follow you across other websites.
| Cookie Name | Purpose | Duration |
|---|---|---|
| authjs.session-token | Maintains your login session | Up to 30 days |
| __Secure-authjs.session-token | Secure session token (HTTPS) | Up to 30 days |
| authjs.csrf-token | Protects against cross-site request forgery | Session |
| authjs.callback-url | Remembers which page to return to after you sign in | Session |
| authjs.pkce.code_verifier | Secures signing in with Google, Microsoft or eID | 15 minutes |
| authjs.state | Confirms that an eID sign-in returns to the browser that started it | 15 minutes |
| authjs.mfa-pending | Keeps your sign-in pending between the email link and your two-factor code | 10 minutes |
| sso_* | Secures single sign-on through your organization's identity provider | 10 minutes |
| authjs.checkout-redirect-state | Confirms that a checkout started after signing in with Google or Microsoft was requested from this browser | 10 minutes |
| attorly_acquisition_source | Carries your answer to “How did you first hear about us?” from the sign-up form to your new account. Set only if you answer; deleted when the account is created | 1 hour |
| NEXT_LOCALE | Remembers your language preference | 1 year |
| attorly.tz | Holds your device's time zone name so dates and times are shown in your time zone. Set only while you are signed in | 1 year |
| attorly.nav.open | Remembers whether you keep the side menu open or collapsed. Set when you change it | 1 year |
| getcookies_consent | Stores your cookie choices. Kept in your browser's local storage rather than as a cookie | 1 year |
| us_privacy | Records whether you have opted out of the sale or sharing of your personal information. Set only where privacy law works on an opt-out basis, as in several US states | 1 year |
On attorly.ai, the cookies whose names start with authjs. carry a __Secure- or __Host- prefix in your browser (for example __Host-authjs.csrf-token), which means they are only ever sent over HTTPS.
Analytics Cookies
We use analytics cookies to understand how visitors interact with our website. This helps us improve our service. These cookies are only set if you consent to them.
| Cookie Name | Purpose | Duration |
|---|---|---|
| _ga | Tells visitors apart so we can count usage | 2 years |
| _ga_* | Keeps track of the analytics session | 2 years |
Third-Party Cookies
Some third-party services we use set their own cookies, on our website or on their own pages:
- Stripe: Payments are completed on Stripe's own checkout page, which sets Stripe's cookies under Stripe's own cookie policy
- GetCookies: Cookie consent management
- Google Analytics: Website usage statistics, set only once you have consented
Managing Your Cookie Preferences
You can manage your cookie preferences at any time:
- Click the cookie icon in the bottom corner of the page to update your preferences
- Configure your browser settings to block or delete cookies
- Note: Blocking essential cookies may affect website functionality
Legal Basis
We use strictly necessary cookies based on our legitimate interest to provide a functioning website. For analytics and other non-essential cookies, we rely on your consent as the legal basis for processing, in accordance with Article 6(1)(a) of the GDPR and the ePrivacy Directive.
Contact Us
If you have questions about our use of cookies, please contact us at hello@attorly.ai