Cookie notice

One cookie for your session — and a second only if you arrived by clicking an advert we paid for. One third-party script runs on this site: the help widget, described below.

Last updated 19 September 2026. Material changes are announced to workspace owners by email before they take effect.

1The cookies

cursiv_session	Keeps you signed in. Contains an opaque identifier, not your name, email or any personal information. Set only after you sign in, deleted when you sign out.
cursiv_click	Set only if you arrive by clicking an advert we paid for. It holds the click identifier that the advertising platform itself put into the link, so that if you go on to open an account we can tell them their advert worked. Expires after 90 days.If you did not arrive from an advert it is never set, and nothing about your visit is different.

The first is strictly necessary: without it the act of signing in would not persist to the next page. Neither POPIA nor the ePrivacy rules require consent for a cookie in that category, which is why you were not asked.

The second is ours alone. It cannot be read by any script, by us or by anyone else — it is marked HttpOnly, so only our server ever sees it — and no third party can reach it. It is used once, when you open an account, and never at any other moment.

2What we do not set

No analytics cookie. No tag manager. No advertising pixel, no heatmap, no session recorder, no social widget. We do not know how many people read this page.

There is one third-party script: the IntelliDesk help widget. It loads from intellidesk.co on every page, so your browser contacts IntelliDesk directly and it can see your IP address and browser details. What Cursiv itself sends it — and where it is held — is listed on the sub-processors page.

That includes advertising. We do buy adverts, and we do want to know which of them work, but the usual way of finding out is to install the advertising platform’s script on every page, where it sets their cookies and reports every page you look at. We use the other method they offer: their own click identifier arrives in the link, our server keeps it, and our server tells them once, if you open an account. Nothing is transmitted when you merely read a page, and no advertising company can see you here.

This is a deliberate choice and not an oversight. A product whose purpose is to hold other people’s confidential agreements is a poor place to install a script that phones home on every page. It costs us something real — we cannot build remarketing audiences and our conversion matching is less precise than a pixel’s — and it is worth it.

3Why there is no banner

Because there is nothing to consent to. A consent banner over a strictly necessary cookie and one that most visitors never receive is theatre, and worse than useless: it teaches people to click through consent requests without reading, which makes the ones that matter elsewhere less effective.

If we ever add something that genuinely requires consent, you will be asked properly, and this page will say what changed and when. What we do with personal information is in the privacy policy.