Cookies and browser storage in SiteManager Memory
Draft of 19 October 2026
Memory uses only the cookies and browser storage it needs to work: to keep you signed in, protect forms, and remember which conversation you have open. It uses no analytics, advertising or social media cookies, and loads no third-party scripts, fonts or images on its pages. Because these items are strictly necessary for the service you ask for, we do not ask for consent. You can delete them in your browser; Memory then signs you out or forgets the open conversation.
Customer app (agencies, clients, direct customers)
| Name | Purpose | Lifetime | Set by | Type |
|---|---|---|---|---|
__Host-sm-session |
Keeps you signed in | Until you close the browser; our server refuses it 12 hours after sign-in in any case; removed when you log out. A browser set to restore your last session can keep it until then | Memory | Strictly necessary (authentication) |
__Host-sm-csrf |
Protects forms against forged submissions from other websites | Until you close the browser; replaced at sign-in | Memory | Strictly necessary (security) |
ask_session |
Remembers which conversation is open in the chat of a memory | Until you close the browser | Memory | Strictly necessary (requested feature) |
sm-memory.chat.v1.* (session storage, not a cookie) |
Keeps an unsent question and a pending answer if the page reloads | Until the tab closes; cleared when another account signs in in the same tab; never sent to our server | Memory | Strictly necessary (requested feature) |
Memory request form on an agency's website (embed)
The form and its loader set and read no cookies and use no browser storage. The agency's own web page that shows the form may use its own cookies; see that website's cookie notice.
Payment page (not active today)
When paid activation starts, the payment page (and only that page) loads our payment provider's script from
js.recurly.com. Recurly may then use its own cookies or storage, for example for fraud prevention. [This row
will be completed before payments are switched on.]
Staff apps (SiteManager staff only)
| Name | Purpose | Lifetime | Set by |
|---|---|---|---|
Google Identity-Aware Proxy cookies (for example GCP_IAP_UID, __Host-GCP_IAP_AUTH_TOKEN_*; names from Google's documentation, not observed live) |
Staff sign-in with Google | Set by Google | |
sm_memory_view |
Staff or client presentation of a page | Until the browser closes | Memory |
sm_memory_workspace |
Which customer workspace a staff member is viewing | Until the browser closes | Memory |
ask_session, sm-memory.chat.v1.* |
As in the customer app | As above | Memory |
smca_review_session |
Operator approval page for case studies | 1 hour | Memory |