Palindrome Cookie Policy
Last updated: August 20, 2026
This Cookie Policy explains how Palindrome Labs, Inc. ("Palindrome," "we," "us," or "our") uses cookies and similar technologies on palindromelabs.ai, its subdomains, and our hosted platform (the "Services"). It supplements our Privacy Policy.
1. Technologies Covered
Cookies are small text files stored on a device. We also use local storage, pixels, software development kits, and similar technologies. This policy refers to all of them as "technologies."
Some technologies operate for a browser session. Others persist until they expire, you delete them, or the applicable provider or Palindrome removes them.
2. Technologies We Use
2.1 Essential technologies
Essential technologies provide authentication, security, session management, and application delivery. The Services may not function correctly if you block them.
| Purpose | Information or function | Provider | Typical duration |
|---|---|---|---|
| Authentication and session management | Sign-in state, account session, organization context, and security tokens | Clerk; Palindrome | Session duration or the configured account-session period |
| Enabled identity-provider authentication | Information needed to complete sign-in through an identity provider selected by you or your organization | Google, Microsoft, or an enterprise identity provider, when enabled | Set by the identity provider under its policy |
| Application delivery and security | Routing, delivery, abuse prevention, and security signals | Vercel; Palindrome | Session or the period required for delivery and security |
| Application preferences | Settings stored on the device when a user selects or configures them | Palindrome | Until the preference expires, changes, or is deleted |
2.2 Privacy-focused website analytics
We use Fathom Analytics to understand how visitors use our public website. Fathom does not place cookies or persistent identifiers on your device, and we do not use it to follow individuals across websites.
| Purpose | Information or function | Provider | Typical duration |
|---|---|---|---|
| Website audience measurement | Pages viewed, referring websites, browser and device type, country-level location, and aggregated visit and event counts | Fathom Analytics | Fathom deletes its daily visitor hashes each day; aggregate website statistics may remain in our Fathom account |
When a page loads, the visitor's browser sends an IP address and user-agent information to Fathom. Fathom processes that information to create a salted visitor hash that rotates daily and to protect its service against abuse. Fathom does not store the raw IP address with website activity or make it available to us. Additional information appears in Fathom's description of how it processes analytics data.
We do not use a cookie consent banner or cookie-preference manager for Fathom because this analytics configuration does not place cookies or other non-essential storage on your device. We do not use Fathom to identify individual visitors or for cross-site advertising.
2.3 Application analytics and diagnostic technologies
Our authenticated platform may use browser-side and server-side technologies to measure product usage, manage features, diagnose errors, monitor performance, and protect the Services.
| Purpose | Information or function | Provider | Typical duration |
|---|---|---|---|
| Product analytics and feature management | Page and feature activity, session and device information, authenticated user or organization identifiers, and feature-flag state | PostHog | When enabled, browser storage lasts until its configured expiration or deletion; server-side event retention follows Palindrome's provider configuration |
| Error and performance monitoring | Error reports, diagnostic information, request or trace identifiers, and performance measurements | Sentry | Browser storage, if any, lasts for the session or configured period; server-side event retention follows Palindrome's provider configuration |
We configure these providers to limit the Personal Information they receive. We do not activate non-essential cookies or local storage for application analytics where law requires prior consent unless the user has provided that consent through an available mechanism. In those circumstances, we may use server-side analytics or a configuration that does not place non-essential information on the user's device. The Privacy Policy describes how we use and disclose Personal Information collected through these technologies.
2.4 Advertising technologies
We do not currently use advertising or targeting technologies for cross-context behavioral advertising or retargeting. We do not use technologies to sell Personal Information. We will update this policy and implement any required consent or opt-out control before beginning those practices.
3. Your Choices
We do not currently offer a general cookie-preference manager. Fathom does not require one for its analytics because it does not use cookies or other device storage, and we do not use advertising or cross-site tracking technologies. While no consent mechanism is available, we do not activate non-essential browser storage in circumstances where law requires prior consent. We will implement the required notice and choice before introducing that storage.
Most browsers allow you to block or delete the cookies and local storage used for authentication, security, preferences, application delivery, and application analytics. Blocking these technologies may prevent sign-in or other Services from working or may limit analytics and diagnostic functions.
You may contact privacy@palindromelabs.ai with a question about our use of these technologies.
4. Emails
We may send marketing, product, service, security, support, or transactional emails. We do not currently use tracking pixels to determine whether a recipient opened or interacted with an email. If we introduce email tracking, we will update our disclosures and provide any choice required by law.
5. Retention
Essential technology lifetimes vary by purpose and configuration. Session technologies generally expire when the browser session or authenticated session ends. Persistent preference or authentication technologies remain until their configured expiration, until you clear them, or until Palindrome or the provider removes them.
Fathom deletes its daily visitor hashes each day. Aggregate website statistics may remain in our Fathom account so that we can understand website trends over time. Fathom does not store those aggregate statistics on your device. Application analytics and diagnostic technologies follow the browser-storage and provider-retention periods described above.
Provider updates, browser settings, and customer-specific authentication configuration may change a technology's name or duration. We review the technologies used by the Services and update this policy when a material practice changes.
6. Changes to This Policy
We may update this policy as our technologies or legal obligations change. We will post the revised version with a new "Last updated" date and provide any additional notice required by law.
7. Contact Us
Palindrome Labs, Inc.
128 King St, Floor 3
San Francisco, CA 94107, United States
privacy@palindromelabs.ai