01
The short version
AGA CRM sets one cookie, to keep you signed in. The public pages of this website set no cookies at all. We use no analytics, advertising or tracking of any kind. The only outside service on our pages is Cloudflare’s bot check on forms and on the website assistant.
02
Everything we store in your browser
This is the complete list.
| Name | Type | What it does | How long |
|---|---|---|---|
| crm_refresh | Cookie, necessary | Keeps you signed in. Holds a random value, not your details. Only sent over secure connections and only to sign-in requests; scripts cannot read it. | 30 days; renewed when used; ended when you sign out |
| aga_device | Cookie, necessary | Recognises a browser you have signed in from before, so we can email you when your account is signed in to from a new one. Holds a random value, not your details. Only sent over secure connections and only to sign-in requests; scripts cannot read it. | 400 days |
| crm_last_input | Browser storage | The time of your last activity, shared between your open tabs, so automatic sign-out only happens when you are really away. | Until cleared |
| crm_on_break:… | Browser storage | Remembers that you are on a break, so you are not signed out while away. Removed when the break ends or you sign out. | Until the break ends |
| crm_2fa_not_now:… | Browser storage | Remembers that you chose “Not now” on the two-factor reminder, where your workspace makes it optional. | Until cleared |
| crm_website_assistant | Browser storage | Only if you use the “Ask us” assistant on this website: the ID and secret of your conversation, so it carries on as you move between pages. Not your messages, which are kept by us (see the Privacy Policy). | 7 days, or until you start a new chat |
| crm_idle_logout | Session storage | Lets the sign-in page explain that you were signed out for inactivity. Deleted as soon as it is read. | Seconds |
| Access token | Memory only | Authorises your requests. Never written to storage. | 15 minutes |
03
Cloudflare’s bot check
The contact, demo, sign-in and sign-up forms, the first message to the website assistant, and some account forms, use Cloudflare Turnstile to tell people from bots. It loads from Cloudflare and runs in its own frame. It sets no cookies on this website, but Cloudflare receives your IP address and technical details of your browser to make the check. This is needed to keep the service secure. Cloudflare’s privacy policy explains how it handles that data.
04
Chat on our clients’ websites
When a business puts AGA CRM’s chat on its own website, the chat stores a few items in the visitor’s browser on that website (names starting agacrm-chat-): a random visitor ID so a returning visitor can continue their conversation, the name and email they gave, and whether they have rated a chat. That business is responsible for telling its visitors about this in its own cookie notice.
06
Your choices and contact
You can block or delete cookies and stored data in your browser settings. If you do, you will be signed out and will need to sign in again.
Questions: info@theagacrm.com.