1. Introduction
IS.TEAM LLC ("IS.TEAM," "we," "us," or "our") uses cookies and similar tracking technologies on https://is.team and related subdomains (collectively, the "Service"). This Cookie Policy explains what these technologies are, why we use them, and your rights to control them.
This Cookie Policy is part of and should be read together with our Privacy Policy and Terms of Service.
By continuing to use the Service after reviewing this policy, you consent to our use of cookies as described herein, except where applicable law requires explicit opt-in consent, in which case we will obtain such consent through our cookie consent banner.
2. What Are Cookies?
Cookies are small text files placed on your device (computer, tablet, or mobile phone) when you visit a website. They allow the website to remember your actions and preferences over a period of time, so you don't have to re-enter them each time you visit.
Similar Technologies used alongside or instead of cookies include:
| Technology | Description |
|---|---|
| Local Storage | Browser-based persistent key-value storage (no expiration unless cleared) |
| Session Storage | Browser-based temporary key-value storage (cleared when tab closes) |
| IndexedDB | Browser-based structured data storage for larger data sets |
| Pixel Tags / Web Beacons | Tiny transparent images embedded in pages or emails that trigger HTTP requests to log access |
| Device Fingerprinting | Combination of device/browser attributes used to identify a device (used only for fraud detection) |
3. Types of Cookies We Use
We categorize our cookies into four groups based on purpose:
3.1 Strictly Necessary Cookies
These cookies are essential for the Service to function. Without them, core features like logging in and staying logged in cannot work. These cookies cannot be disabled.
| Cookie / Storage Key | Provider | Purpose | Duration |
|---|---|---|---|
Firebase Auth Token (firebase:authUser:...) | Google Firebase | Maintains your authenticated session | Session / up to 1 year (depending on "Stay logged in" setting) |
| Firebase ID Token refresh | Google Firebase | Silently refreshes your authentication token | Session |
| CSRF Token | IS.TEAM | Prevents cross-site request forgery attacks on API calls | Session |
__session | IS.TEAM | Server-side session identifier for authenticated pages | Session |
csp-nonce | IS.TEAM | Content Security Policy nonce for inline script authorization | Session |
Legal Basis: Strictly necessary cookies are placed on the basis of legitimate interest (security and essential functionality). No consent is required under ePrivacy Directive Article 5(3) exceptions.
3.2 Functional / Preference Cookies
These cookies remember your preferences and settings to enhance your experience. They are not strictly necessary but improve usability. You may disable these, but doing so may affect some features.
| Cookie / Storage Key | Provider | Purpose | Duration |
|---|---|---|---|
theme (localStorage) | IS.TEAM | Remembers your light/dark mode preference | Persistent |
canvas-zoom-{boardId} (localStorage) | IS.TEAM | Remembers your zoom level for each board | Persistent |
sidebar-collapsed (localStorage) | IS.TEAM | Remembers whether sidebars are open or closed | Persistent |
onboarding-completed (localStorage) | IS.TEAM | Records whether you have completed onboarding slides | Persistent |
preferred-language (localStorage) | IS.TEAM | Stores your language preference if changed | Persistent |
cookie-consent (localStorage) | IS.TEAM | Stores your cookie preference choices | 1 year |
workspace-last-visited (localStorage) | IS.TEAM | Remembers the last workspace/board you were viewing | Persistent |
3.3 Analytics Cookies
These cookies collect information about how you use the Service — which pages you visit, how long you stay, what features you use — to help us improve the platform. Data is aggregated and, where technically feasible, anonymized before analysis. You may opt out via Cookie Settings.
| Cookie | Provider | Purpose | Duration |
|---|---|---|---|
_ga | Google (Firebase Analytics) | Distinguishes unique users for analytics | 2 years |
_ga_{measurementId} | Google (Firebase Analytics) | Stores and counts page views | 2 years |
_gid | Google (Firebase Analytics) | Distinguishes users (shorter-term) | 24 hours |
_gat | Google (Firebase Analytics) | Rate-throttles requests to Google Analytics | 1 minute |
| Firebase Performance Monitoring | Measures page load times and API response performance | Session |
Third-Party Analytics: Google Firebase Analytics is our primary analytics provider. Google may use collected data per their own Privacy Policy. You may opt out of Google Analytics across all websites using the Google Analytics Opt-out Browser Add-on.
3.4 Marketing and Advertising Cookies
We currently do not use third-party advertising cookies or retargeting pixels on the IS.TEAM platform. We do not serve behavioral advertisements based on your IS.TEAM usage.
If we introduce marketing cookies in the future, we will:
- Update this Cookie Policy with at least 30 days' advance notice
- Obtain your explicit opt-in consent before placing any marketing cookies (EEA/UK users) or provide a clear opt-out (US users)
- List each cookie, its provider, purpose, and duration in this section
4. Third-Party Cookies
Some third-party services embedded in or linked from the Service may set their own cookies. IS.TEAM does not control these third-party cookies.
| Third Party | Context | Their Cookie Policy |
|---|---|---|
| Google (Firebase, Gemini) | Authentication, database, AI features | Google Privacy |
| Stripe | Payment processing pages (checkout flow) | Stripe Privacy |
| Daily.co | Meeting Notes voice room (when feature is active) | Daily Privacy |
When you use embedded features (e.g., Daily.co voice rooms), those iframes or components may set cookies governed by the third party's own policy.
5. Cookies Placed by Integrations
When you connect third-party integrations (GitHub, Slack, Google Drive, Figma), those OAuth flows may redirect through the third party's domain, where those services may set their own cookies. IS.TEAM does not control cookies set during third-party OAuth flows.
6. Email Pixels
Transactional and (if you have opted in) marketing emails we send via Resend may include a 1×1 tracking pixel that tells us:
- Whether the email was opened
- Your approximate location (city-level) at open time
- The email client or device used to open the email
This data helps us confirm delivery and improve email templates. To prevent email pixel tracking, configure your email client to block remote images (most privacy-focused clients do this by default).
7. Your Cookie Choices
7.1 Cookie Consent Banner
When you first visit the Service, you will see a cookie consent banner where you can:
- Accept all cookies (strictly necessary + functional + analytics)
- Reject non-essential cookies (strictly necessary only)
- Customize by category
Your preferences are stored in cookie-consent local storage for 1 year.
7.2 Changing Your Preferences
You may change your cookie preferences at any time:
- In the app: Account Settings → Privacy → Cookie Settings
- Clearing local storage: Clear your browser's local storage to reset all preferences (you will be prompted again on next visit)
7.3 Browser Controls
All major browsers allow you to control cookies through browser settings:
| Browser | Cookie Settings Location |
|---|---|
| Chrome | Settings → Privacy and Security → Cookies |
| Firefox | Settings → Privacy & Security → Cookies and Site Data |
| Safari | Preferences → Privacy → Manage Website Data |
| Edge | Settings → Cookies and Site Permissions |
Warning: Blocking all cookies (including strictly necessary ones) will break the Service. We recommend blocking only third-party or analytics cookies through your browser settings or using the in-app Cookie Settings.
7.4 Do Not Track
IS.TEAM honors the Do Not Track (DNT) browser signal where technically feasible. When DNT is detected, we limit non-essential tracking (analytics cookies) and do not place marketing cookies.
7.5 Mobile Applications
If IS.TEAM offers mobile applications in the future, those apps may use equivalent device identifiers (IDFA on iOS, GAID on Android) instead of cookies. Opt-out mechanisms will be described in the app's privacy settings. The current Service is web-only.
7.6 Opt-Out Links for Specific Providers
- Google Analytics: Google Analytics Opt-out
- Google: My Ad Center (for Google ad personalization)
- General opt-out: NAI Opt-out | DAA Opt-out
8. Retention Periods Summary
| Category | Typical Retention |
|---|---|
| Strictly necessary (auth session) | Session to 1 year |
| Functional preferences (localStorage) | Until cleared by user |
| Analytics (Google) | Up to 2 years (per Google's cookie durations) |
| Cookie consent record | 1 year |
| Email pixel data | 2 years |
9. International Users
If you access the Service from the European Economic Area (EEA), United Kingdom, or other jurisdictions with specific cookie consent laws:
- We will present a cookie consent banner before placing any non-strictly-necessary cookies
- You may withdraw consent at any time through Cookie Settings
- Our cookie consent mechanism complies with ePrivacy Directive requirements and applicable national implementations
- Our use of Google Analytics is configured to anonymize IP addresses for EEA/UK users where technically supported
10. Changes to This Cookie Policy
We may update this Cookie Policy to reflect changes in our cookie practices or applicable law. We will notify you of material changes by:
- Updating the "Last Updated" date at the top of this page
- Displaying a new cookie consent banner (which will also allow you to review and update your preferences)
- Sending an email notification for significant changes
11. Contact
For questions about our use of cookies or to exercise your cookie-related rights:
IS.TEAM LLC 123 Placeholder Street, Suite 100 Wilmington, DE 19801 United States Email: privacy@is.team General Contact: hi@is.team Website: https://is.team