What Are Cookies
Cookies are small text files stored on your device when you visit a website. They help websites work and give site owners basic usage information.
Cookies and Browser Storage We Use
The AuditFront app (app.auditfront.com) uses only essential cookies required for guest assessment recovery, authentication, and session management. Limited first-party product events are sent without using analytics or advertising cookies. There are no third-party tracking cookies in the app.
Our marketing website (www.auditfront.com) sets Google Analytics cookies only after you choose "Allow cookies". Without that choice it keeps anonymous counts that use no cookies or visitor identifiers, described under "Website Measurement" below.
| Cookie | Provider | Purpose | Duration |
|---|---|---|---|
| auditfront_guest | AuditFront | Recovers an anonymous assessment and securely claims it after sign-up | Up to 30 days |
| KEYCLOAK_SESSION | Keycloak (self-hosted) | Authentication session - keeps you logged in | Session / 30 days (remember me) |
| AUTH_SESSION_ID | Keycloak (self-hosted) | Session identifier for SSO flows | Session |
| KC_RESTART | Keycloak (self-hosted) | Authentication flow state | Session |
| af-cookie-consent (local storage) | AuditFront | Stores whether you allowed or rejected analytics cookies | 365 days |
| af-marketing-session (session storage, after consent) | AuditFront | Preserves referral source and links consenting website activity to an assessment | 30 minutes |
Analytics Cookies (Marketing Website Only)
The following cookies are set by Google Analytics 4 on our marketing website only after you choose "Allow cookies". They are scoped to www.auditfront.com, so they are not sent to the application (app.auditfront.com). Google signals and advertising features are turned off.
| Cookie | Provider | Purpose | Duration |
|---|---|---|---|
| _ga | Google Analytics | Distinguishes visitors for aggregate statistics (pseudonymous identifier) | 1 year from your last visit |
| _ga_* | Google Analytics | Maintains session state | 1 year from your last visit |
Website Measurement
The website delivery layer keeps hourly counts of public page requests by page, source, country and broad request category. These server-side counters do not use browser storage, visitor identifiers or IP addresses, and do not link your visits. They count requests, not unique people, and are retained for up to 180 days.
The website also sends AuditFront's own servers an anonymous record of each page view and of clicks on assessment links, template downloads and tagged calls to action: the page path, the link destination and placement, and the referring site or campaign source. These records set no cookies, carry no visitor identifier and store nothing on your device, so they cannot be linked to each other, to you or to a later visit. Known automated browsers are skipped. Records are retained for up to 180 days. We do not record form contents, assessment answers, recordings or fingerprints in marketing measurement.
Only if you choose "Allow cookies", Google Analytics loads with the cookies listed above, and a random identifier in session storage links your website events to each other and to an assessment you start in the app. The identifier expires after 30 minutes and is passed to the app as a link parameter.
Do Not Track or Global Privacy Control switches off all of this measurement, including the anonymous records. Choose "Reject cookies" to keep Google Analytics and the session identifier off. You can change your choice through "Cookie settings" in the footer. The stored choice lasts up to one year.
Managing Cookies
You can control and delete cookies through your browser settings. Please note that disabling essential cookies may prevent the Service from functioning correctly.
Changes to This Policy
We may update this Cookie Policy from time to time. Changes will be posted on this page with an updated "Last updated" date.