Cookie Policy
Last updated: October 10, 2026
This Cookie Policy explains how Attorly (operated by Getia AS) uses cookies and similar technologies when you visit our website. We use cookies to ensure our website works properly and to improve your experience. We use GetCookies.co to manage your cookie consent preferences.
Cookie Consent
On your first visit you will see a cookie consent banner. You can accept everything, reject everything non-essential, or open "Customize" to turn categories on and off individually. We persist your decision for one year; if we change the scope of processing, the banner re-appears so you can give fresh consent.
- Strictly necessary — Signing in and its security steps, CSRF protection, your language, time zone and menu preferences, and the consent record itself. Always enabled under ePrivacy Art. 5(3).
- Analytics — Google Analytics 4 and Google Tag Manager, and the sign-up timing entries listed under browser storage. Helps us see which pages are useful and which are broken. Loaded and set only with your consent, wherever you are.
- Marketing — Campaign attribution, kept in your browser's storage. Lets us measure which marketing channels bring people to Attorly. Set only with your consent, wherever you are, and removed if you withdraw it.
What Are Cookies
Cookies are small text files that are placed on your device when you visit a website. They are widely used to make websites work efficiently and to provide information to website owners. Cookies can be 'session' cookies (deleted when you close your browser) or 'persistent' cookies (remain on your device for a set period).
Strictly Necessary Cookies
These cookies are essential for the website to function properly. They cannot be disabled as the website would not work correctly without them. The session cookie identifies your signed-in account, and its contents are encrypted. None of these cookies is used for advertising or to follow you across other websites.
| Cookie Name | Purpose | Duration |
|---|---|---|
| authjs.session-token | Maintains your login session | Up to 30 days |
| __Secure-authjs.session-token | Secure session token (HTTPS) | Up to 30 days |
| authjs.csrf-token | Protects against cross-site request forgery | Session |
| authjs.callback-url | Remembers which page to return to after you sign in | Session |
| authjs.pkce.code_verifier | Secures signing in with Google, Microsoft or eID | 15 minutes |
| authjs.state | Confirms that an eID sign-in returns to the browser that started it | 15 minutes |
| authjs.mfa-pending | Keeps your sign-in pending between the email link and your two-factor code | 10 minutes |
| sso_* | Secures single sign-on through your organization's identity provider | 10 minutes |
| authjs.checkout-redirect-state | Confirms that a checkout started after signing in with Google or Microsoft was requested from this browser | 10 minutes |
| attorly_acquisition_source | Carries your answer to “How did you first hear about us?” across the sign-in redirect when you continue with Google or Microsoft, so it reaches the account created afterwards. Set only if you answered and start such a sign-in; deleted when the account is created | 1 hour |
| NEXT_LOCALE | Remembers your language preference | 1 year |
| attorly.tz | Holds your device's time zone name so dates and times are shown in your time zone. Set only while you are signed in | 1 year |
| attorly.nav.open | Remembers whether you keep the side menu open or collapsed. Set when you change it | 1 year |
| us_privacy | Records whether you have opted out of the sale or sharing of your personal information. Set only where privacy law works on an opt-out basis, as in several US states | 1 year |
On attorly.ai, the cookies whose names start with authjs. carry a __Secure- or __Host- prefix in your browser (for example __Host-authjs.csrf-token), which means they are only ever sent over HTTPS.
Analytics Cookies
We use analytics cookies to understand how visitors interact with our website. This helps us improve our service. These cookies are only set if you consent to them.
| Cookie Name | Purpose | Duration |
|---|---|---|
| _ga | Tells visitors apart so we can count usage | 2 years |
| _ga_* | Keeps track of the analytics session | 2 years |
Third-Party Cookies
Some third-party services we use set their own cookies, on our website or on their own pages:
- Stripe: Payments are completed on Stripe's own checkout page, which sets Stripe's cookies under Stripe's own cookie policy
- GetCookies: Cookie consent management
- Google Analytics: Website usage statistics, set only once you have consented
Browser Storage
Besides cookies, Attorly keeps the entries below in your browser's web storage. Local storage stays until you clear your browser data or the site removes it; session storage is deleted when you close the tab. These entries are never sent to other websites. The entries our consent manager, GetCookies, keeps are included.
| Cookie Name | Type | Purpose | Duration | Category |
|---|---|---|---|---|
| theme | Local storage | Your choice of light or dark mode | Until you clear your browser data | Strictly necessary |
| preferred_currency | Local storage | The currency you chose for prices | Until you clear your browser data | Strictly necessary |
| attorly.assistant.model | Local storage | The AI model you chose for the assistant | Until you clear your browser data | Strictly necessary |
| attorly.nav.cases.open | Local storage | Whether the case list in the side menu is open or collapsed | Until you clear your browser data | Strictly necessary |
| *.sidePanelOpen | Local storage | Whether an editor's side panel is open, remembered per document | Until you clear your browser data | Strictly necessary |
| attorly.today.actingFor | Local storage | Which organization your Today page acts for | Until you clear your browser data | Strictly necessary |
| attorly:approveConfirmDismissed | Local storage | That you chose not to see the confirmation again when approving a draft | Until you clear your browser data | Strictly necessary |
| attorly:anchor-tooltip-dismissed:v1 | Local storage | That you dismissed the first-use tip about linked text | Until you clear your browser data | Strictly necessary |
| gp_coupon_banner_dismissed:attorly | Local storage | That you closed the promotional banner | Until you clear your browser data | Strictly necessary |
| attorly:verify-email-banner-dismissed | Session storage | That you closed the reminder to verify your email address | Until you close the tab | Strictly necessary |
| attorly.draftSheet.marginOpen | Session storage | Whether the margin on a draft page is open | Until you close the tab | Strictly necessary |
| attorly.draftSheet.panelOpen | Session storage | Whether the side panel on a draft page is open | Until you close the tab | Strictly necessary |
| attorly.planWall.deferredAction | Session storage | An action you started before checkout, so it can finish when you return. Ignored after 30 minutes | Until you close the tab | Strictly necessary |
| attorly.today.pendingQuestion | Session storage | A question you asked before signing up, so it is answered once you have. Ignored after 30 minutes | Until you close the tab | Strictly necessary |
| attorly.share.claims.* | Session storage | Which points in a case you have already shared with a lawyer | Until you close the tab | Strictly necessary |
| gp_coupon:attorly | Session storage | A coupon code you arrived with, so it is applied at checkout | Until you close the tab | Strictly necessary |
| attorly.signupStartedAt | Session storage | When your account was created, to measure how long sign-up takes. Set only with your analytics consent | Until you close the tab | Analytics |
| attorly.onboardingCompleted | Session storage | That your sign-up has been counted as completed, so it is counted once. Set only with your analytics consent | Until you close the tab | Analytics |
| ft_utm | Local storage | The campaign that first brought you to Attorly (UTM parameters and referring site). Set only with your marketing consent and removed if you withdraw it | Until you clear your browser data | Marketing |
| lt_utm | Session storage | The campaign that brought you here in this session (UTM parameters and referring site). Set only with your marketing consent and removed if you withdraw it | Until you close the tab | Marketing |
| getcookies_consent | Local storage | Your cookie choices, as recorded by our consent manager | 1 year | Strictly necessary |
| getcookies_session_id | Local storage | A random identifier our consent manager attaches to the log of your choice | Until you clear your browser data | Strictly necessary |
| getcookies_config_* | Local storage | The consent banner's settings and texts, cached for an hour | Until you clear your browser data | Strictly necessary |
| getcookies_region_* | Local storage | Which privacy rules apply where you are, as our consent manager determines from your IP address, cached for an hour | Until you clear your browser data | Strictly necessary |
| getcookies_heartbeat_sent_* | Local storage | That our consent manager has reported to its provider that it is installed on this site, so it reports this only once | Until you clear your browser data | Strictly necessary |
| getcookies_optout_sent_* | Local storage | That your opt-out from the sale or sharing of your personal information was reported to our consent manager's provider, so it is reported only once. Set only where privacy law works on an opt-out basis, as in several US states | Until you clear your browser data | Strictly necessary |
Managing Your Cookie Preferences
You can manage your cookie preferences at any time:
- Use the “Cookie preferences” link in the page footer to update your choices
- Configure your browser settings to block or delete cookies
- Note: Blocking essential cookies may affect website functionality
Legal Basis
We use strictly necessary cookies based on our legitimate interest to provide a functioning website. For analytics and other non-essential cookies, we rely on your consent as the legal basis for processing, in accordance with Article 6(1)(a) of the GDPR and the ePrivacy Directive.
Contact Us
If you have questions about our use of cookies, please contact us at hello@attorly.ai