Effective September 14, 2026 · Version v1.7
Version v1.7 · Effective September 14, 2026 · Published September 14, 2026
This Cookie Policy explains how Octicase ("we," "us," "our") and our service providers use cookies and similar tracking technologies when you access our website and Services. Please read this policy carefully.
Cookies are small files containing text that are placed on your device (computer, tablet, smartphone) when you visit a website. Cookies allow the website to recognize your device and remember information about you. Cookies can be stored on your device for the duration of your session (session cookies) or for an extended period (persistent cookies). Similar tracking technologies include web beacons, pixels, and device identifiers.
These cookies are required for the website and Services to function properly. They are essential for authentication, security, session management, and form submission. These cookies are set automatically and do not require consent under most privacy laws.
These cookies remember your preferences and choices (language, theme, accessibility settings) to enhance your user experience. They improve functionality and personalization but are not strictly required for the website to work.
These cookies collect information about how you interact with the website, including pages visited, buttons clicked, time spent, and errors encountered. We use analytics to understand user behavior, optimize features, and improve the Services. You may decline analytics cookies through the consent banner or the cookie management tool.
We set no advertising cookies anywhere on this website. On our marketing and campaign landing pages, and only where you consent, we set the analytics cookies described in Section 4. Those pages describe our product to prospective business customers. They do not ask for, and you cannot enter on them, information about an injury, a medical condition, a treatment or a claim. Section 7 lists the pages where no third-party tracking loads at all, regardless of any consent choice.
These cookies are set directly by Octicase and can only be read by Octicase. We use first-party cookies for authentication, session management, preferences, and analytics.
These cookies are set by third-party service providers (payment processors, the embedded video player, and Google Analytics on marketing pages) and may be read by those third parties. We embed the video player in Do Not Track mode so that it does not set tracking or analytics cookies. You may opt out of third-party tracking through your browser or the mechanisms provided by those providers.
The following table describes specific cookies we use:
| Cookie Name | Purpose | Duration | Type |
|---|---|---|---|
| _session_id | Session authentication, CSRF protection | Session (expires on logout) | Strictly Necessary |
| _csrf_token | CSRF protection for form submissions | Session | Strictly Necessary |
| _ga, _gid | Google Analytics, on marketing pages only. | _ga: 2 years; _gid: 24 hours (Google defaults) | Analytics - marketing pages only, never on the pages listed in Section 7 |
| user_preferences | Theme, language, accessibility settings | 1 year | Functional |
| vimeo_cookie | Vimeo video player. Vimeo is embedded in Do Not Track mode (dnt=1), which suppresses Vimeo's tracking and analytics cookies; only the cookies needed to play the video are set. | Session | Third-Party |
| Payment processor cookies | Payment processing and fraud prevention. The processor for subscription and add-on payments in production is Stripe, Inc. | Persistent (processor policy) | Third-Party |
Most browsers allow you to refuse cookies or notify you when a cookie is being sent. You can typically manage cookie settings through: (i) browser preferences/settings menu (usually under "Privacy" or "Security"); (ii) browser help menu; or (iii) www.aboutcookies.org. Please note that disabling cookies may impair the functionality of the Services.
When you visit our website, a consent banner will appear asking you to accept non-necessary cookies. At launch the banner will carry three controls of the same size and weight, in this order: Accept, Refuse and Choose. Refusing will take exactly one click, like accepting, and no option will be selected in advance. If you refuse we will not show the banner again for twelve months. Where your browser sends a Global Privacy Control signal, we will treat that signal as a refusal from the day automatic handling of the signal is in place, and from that day we will not show you the banner at all. Until then we show the banner whether or not your browser sends the signal, so that you always have a one-click way to refuse; Section 6 explains our position on that signal and how to tell us your choice in the meantime. You may change your preferences at any time through the cookie management tool.
You may opt out of third-party tracking through:
-- Google Analytics: https://tools.google.com/dlpage/gaoptout
-- Vimeo: https://vimeo.com/privacy
-- Payment processor: opt-out and privacy information is published by our payment processor, Stripe, Inc.
Some browsers transmit a "Do Not Track" (DNT) signal. There is no industry or legal standard for how a website must respond to that signal, and we do not currently alter our practices in response to it. What we do instead is structural and does not depend on your browser settings: we do not permit third-party advertising or analytics trackers to load on any page where you enter injury, medical, or claim information, on any page that plays video, or in authenticated areas of the Services, and we do not authorize third parties to collect personally identifiable information about your activity over time and across third-party websites when you use the Services. This disclosure is provided under the California Online Privacy Protection Act (Cal. Bus. & Prof. Code sections 22575 et seq.) and matches Section 4.11 of our Privacy Policy.
Global Privacy Control. Separately from DNT, we will honor the Global Privacy Control (GPC) signal as a valid opt-out of the sale and sharing of personal information under the CCPA and CPRA. Automatic handling of that signal is still being built, so we state this commitment in the future and not as something already in place, and we will update this Section on the day the signal is handled automatically. Two things limit what that gap can reach. First, we do not sell personal information today and we do not share personal information for cross-context behavioral advertising. The one sale our documents provide for is not in use today and cannot happen without a separate signed authorization from you; it is described in Sections 4.8(f) and 4.8(g) of our Privacy Policy, and before any such sale begins we will say so in that Policy, naming the categories sold and the categories of buyer, and publish the opt-out route. Second, we set no advertising cookies at all: the only cookies Section 2.4 describes are analytics cookies on marketing and campaign landing pages, set only where you consent. Until the handling is automatic, please do not rely on the signal alone: refuse non-necessary cookies through the consent banner or the cookie management tool described in Section 5.2, or write to privacy@octicase.com, and we will apply that refusal.
Regardless of any consent choice, we do not load third-party advertising pixels, tag managers, session-replay tools, or third-party chat widgets on the following pages:
Any page where you enter information about an injury, a medical condition, a treatment, or a claim - including Understand My Options and any intake form.
Any page that plays video.
Any signed-in client area or law firm area.
Marketing pages, campaign landing pages, and Directory browse and profile pages may carry first-party analytics cookies, subject to your consent choices, because no case information is entered on them.
Where we measure advertising performance, we use delayed, batched conversion events carrying generic labels only. We do not transmit case type, injury type, estimated claim value, or any URL path that would reveal your situation to any advertising platform, whether client-side or server-side.
We may update this Cookie Policy from time to time. Changes will be posted on this page with an updated effective date. Where a change would broaden the categories of cookies we set or the purposes for which we set them, we will ask for your consent again before the change applies to you.
If you have questions about this Cookie Policy, please contact privacy@octicase.com or legal@octicase.com.