1. The Short Version
Cookies are small files a website stores in your browser. Browser storage (such as local storage) works the same way.
- ruam.ai, our website and waitlist, sets one short-lived cookie of its own, only after you confirm your email. It also keeps your cookie choice in your browser. Its visitor counts use PostHog without cookies.
- The Ruam web app uses cookies to keep you signed in, and product analytics to help us fix problems.
- We run no advertising tools yet. If we add any, they only run as your choices allow, and we list them here first. We never sell data collected through cookies.
2. ruam.ai
The waitlist form uses Cloudflare Turnstile to tell people from bots; Turnstile does not set cookies. When you confirm your email, we set one cookie, ruam_wl_team, for 30 minutes, so your answer to the optional team-size question is saved to your signup. It is strictly necessary for that and is used for nothing else.
We keep your cookie choice in your browser’s local storage, under the name ruam-consent, so we don’t ask again. If you close the “Talk to the founder” button, we remember that asruam-founder-pill-dismissed. If you open the booking calendar, Cal.com loads inside the page and may set its own cookies, under its own policy. This is strictly necessary and stays until you clear it. In the EU, the EEA, the UK, Switzerland, and India we ask first, and nothing optional runs until you choose. Everywhere else, everything starts on and you can turn any of it off from Your Privacy Choices at the bottom of every page.
Analytics. If you allow it, we count visits, where visitors come from, and waitlist signups with PostHog in cookieless mode. It stores nothing in your browser: no cookies, no local storage, no session storage. It respects your browser’s Do Not Track setting.
Preferences and Advertising. If you allow them, Google Tag Manager loads the tools you allowed. Tag Manager itself sets no cookies. Today it loads no advertising tools; when we add one, its cookies are listed here before it goes live. A Global Privacy Control signal from your browser always turns Advertising off.
Cloudflare, which hosts and protects the site, may set a strictly necessary security cookie if a request needs an extra check, for example when unusual traffic is detected:
| Name | Set by | Purpose | How long |
|---|---|---|---|
| __cf_bm | Cloudflare | Tells real visitors from automated traffic, only when bot protection runs. | 30 minutes |
| cf_clearance | Cloudflare | Remembers that you passed a security check, so you are not asked again. | 30 minutes by default |
3. The Ruam Web App
3.1 Strictly necessary
These are needed for the app to work, so they cannot be switched off.
| Name | Set by | Purpose | How long |
|---|---|---|---|
| __session, __client_uat, and related | Clerk, our sign-in provider | Keep you signed in and protect your session. | Session, or until you sign out |
| comaxy_invite | Ruam | Remembers the team invitation you opened while you finish signing up. | 30 minutes |
3.2 Browser storage for speed and safety
| Name | Purpose | How long |
|---|---|---|
| comaxy:swr:… | Keeps a copy of your own overview, schedule, and week so the app opens instantly. Tied to your account and cleared when you sign out. | Until sign-out |
| comaxy-pending-stop | Lets you undo a clock-out for a few seconds, even if the page reloads. | Seconds |
| comaxy:overview:sample-off | Remembers that you hid the sample data on your overview. | Until you clear it |
3.3 Product analytics
In the live app we use PostHog to understand how the app is used and to fix problems. It identifies you by an internal id, not your name, and may record how you use the Ruam app itself with private details and form inputs hidden. It never covers other apps or sites. It respects your browser’s Do Not Track setting.
| Name | Set by | Purpose | How long |
|---|---|---|---|
| ph_…_posthog (cookie and local storage) | PostHog | Recognizes your browser between visits so usage is counted once. | 1 year |
4. The Chrome Extension
The extension does not use cookies. It keeps a few items in Chrome’s extension storage on your device: your sign-in token, your tracking state, your workspace name and timezone, your workspace’s do-not-track list, and any time data waiting to be sent if you were offline. Removing the extension deletes them.
5. Your Choices
- On ruam.ai, open Your Privacy Choices at the bottom of any page to turn Analytics, Preferences, or Advertising on or off at any time.
- If your browser sends a Global Privacy Control signal, we treat it as a choice to turn Advertising off.
- You can delete or block cookies in your browser settings. Blocking the strictly necessary ones will stop you signing in to the Ruam app.
- Turning on Do Not Track in your browser stops product analytics in the Ruam app.
- Browser guides: Chrome, Safari, Firefox.
6. Changes and Contact
If we add a cookie or tool, we add it here first and update the date at the top. Questions: privacy@ruam.ai. For how we handle personal data in general, see our Privacy Policy.