Skip to content

Cookie & Tracking Notice

Last updated November 4, 2026
Effective September 24, 2026

Contents8 sectionsHide

The short version

Foundable uses cookies and similar browser storage to keep you signed in, remember your preferences, run support chat and understand how Foundable is used. Our public pages use the Meta Pixel and OpenAI’s pixel to measure our own ads. Participating customer websites also remember visitors’ choices about sharing visits with Meta. This notice adds detail to our Privacy Policy.

What we use and why

  • Essential: signing you in and keeping your account secure, finishing a checkout or a connection you started, and keeping a message, draft or request safe through a reload so it’s never lost or sent twice. Foundable doesn’t work without these.
  • Preferences: your appearance, language and layout, what you last had open, and which tips you’ve already seen.
  • Support: when you’re signed in, Intercom’s cookies keep your support chat connected to your earlier conversations. We clear them when you sign out.
  • Analytics: PostHog helps us understand how Foundable is used and records sessions to fix problems, as our Privacy Policy describes. Recordings can include what you type into message and form fields, including drafts you don’t send. Fields for passwords, sign-in codes, payment details and app secrets are masked or excluded from recordings.
  • Websites you publish: while a site’s visitor analytics is on, it sets one cookie that groups a visitor’s page views into a visit. A website with a campaign managed by Foundable also stores visitors’ Allow or Decline choice for up to 180 days, without setting a tracking cookie for that feature.

The cookies

CookiePurposeLasts up to
__Host-Http-foundable-sessionKeeps you signed in, renewed as you use Foundable; a sign-in ends after 30 days unused or a year400 days
__Host-foundable-signed-inTells our pages you’re signed inWhile signed in
__Host-Http-foundable-sign-in-…Ties a sign-in you start to its return, so no other site can finish itOne sign-in
WorkOS cookiesWorkOS, our sign-in provider: runs the sign-in page (older wos-session cookies are removed when you next sign in)Varies
__stripe_mid, __stripe_sidStripe: fraud prevention when you view plans or pay (the second lasts 30 minutes)1 year
g_stateGoogle: remembers that you closed its sign-in prompt6 months
intercom-id-…, intercom-session-…, intercom-device-id-…Intercom: support chat while you’re signed in, cleared when you sign out9 months
ph_…_posthogPostHog: product analytics and session recordings1 year
_fbpMeta Pixel: a browser ID, to measure our own ads90 days
_fbcMeta Pixel: the ID of a Meta ad you clicked90 days
__opprefOpenAI’s pixel: the ID of an OpenAI ad you clicked30 days
__obrefOpenAI’s pixel: a browser ID, to measure our own ads1 year
__oaiq_consentOpenAI’s pixel: remembers that its measurement is off for you30 days
session-idWebsites you publish: groups a visitor’s page views into one visit30 minutes

Meta Pixel (our own ads)

Our public pages load the Meta Pixel. Inside the product it runs only when an account is created, a plan checkout starts or a plan is paid. It doesn’t run for browsers that send a Global Privacy Control signal. Global Privacy Control and Do Not Track signals don’t change our own product analytics.

OpenAI’s pixel (our own ads in ChatGPT)

Our public pages load OpenAI’s pixel. Once loaded, it keeps running as you move into the product, and on a page where it runs it can send OpenAI a hashed form of contact details typed into a form. It doesn’t run for browsers that send a Global Privacy Control signal, and it stops when someone who asked us to stop sharing their data for ads signs in.

Campaigns on customer websites

A participating website asks before it shares visits and device details with Meta. Decline stops that sharing, and Privacy on the website lets you change your choice. Global Privacy Control also stops the sharing. We remember your choice in browser storage for that website and business for up to 180 days; deleting its site data forgets the choice. This feature does not install a Meta browser pixel.

Your choices

  • You can block or delete cookies and site data in your browser. Deleting them signs you out and forgets your preferences, and blocking essential cookies stops Foundable from working.
  • If you run a website on Foundable, you can turn its visitor analytics off in the site’s Publish panel.
  • Deleting your account in Settings › Account deletes your account and its content, as our Privacy Policy describes.

Changes

We’ll update this notice when the cookies we use change, and the date at the top shows the latest version. Questions: privacy@foundable.com.

Questions about this document? privacy@foundable.com

Postal: Autono Labs, Inc. (operator of Foundable), 131 Continental Drive, Suite 305, Newark, DE 19713, USA. See /legal for our full set of policies.