Legal
Cookie Policy
Last updated: 18 July 2026
1. What this policy covers
This policy explains which cookies and similar technologies Serverity AI Limited (“Serverity”, “we”, “us”) sets when you use www.serverity.ai and the Serverity platform, what each one is for, how long it lasts, and how you can change your choice.
It sits alongside our Privacy Policy, which explains more broadly how we handle personal data under the UK GDPR and the Data Protection Act 2018. Our use of cookies is also governed by the Privacy and Electronic Communications Regulations 2003 (PECR).
2. A cookie in plain terms
A cookie is a small text file placed on your device by a website. It lets the site recognise your browser between requests — for example, so that you stay signed in as you move from one page to the next. Some cookies are deleted when you close your browser; others persist for a set period.
We also use your browser’s local storage for a small number of interface preferences. That is not a cookie, but we describe it in section 5 because it stores data on your device in a similar way.
3. Strictly necessary cookies
These are required for the platform to work — principally to sign you in, keep your session secure, and remember your cookie choice. They are set on the basis of our legitimate interest in providing a functioning, secure service, and cannot be switched off without making the platform unusable.
| Cookie | Purpose | Duration |
|---|---|---|
| next-auth.session-token | Keeps you signed in and identifies your session. Without it you would be signed out on every page load. | Session / up to 30 days |
| next-auth.csrf-token | Protects sign-in and form submissions against cross-site request forgery. | Session |
| next-auth.callback-url | Returns you to the page you were trying to reach after you sign in. | Session |
| cookie-consent | Records whether you chose "all" or "essential only", so we do not ask again on every visit. | 12 months |
Session cookie names may carry a __Secure- prefix when served over HTTPS, which is a browser security convention and does not change what the cookie does.
4. Analytics cookies — only if you accept
We use PostHog to understand which parts of the platform are used and where people get stuck, so we can improve them. These cookies are set onlyif you choose “Accept all”. If you choose “Essential only”, analytics capture is switched off and no analytics cookie is written.
| Cookie | Purpose | Duration |
|---|---|---|
| ph_*_posthog | Distinguishes one visitor from another and groups page views into a session, so we can see how features are used in aggregate. Not used to build an advertising profile, and not sold or shared for advertising. | 12 months |
The exact cookie name includes our PostHog project identifier, which is why it is shown here as a pattern rather than a fixed string.
We do not use advertising or cross-site tracking cookies, and we do not sell personal data.
5. Local storage
A small number of interface preferences are stored in your browser’s local storage rather than in a cookie. They stay on your device, are never sent to our servers, and hold no personal data — for example, whether you have dismissed a particular explanatory panel, or muted an in-app assistant. Clearing your browser’s site data removes them.
6. Changing your choice
You can change your mind at any time by clearing the cookie-consent cookie for this site in your browser settings. The consent banner will then appear again on your next visit and you can choose differently.
You can also block or delete cookies through your browser’s own settings. Blocking strictly necessary cookies will prevent you from signing in, because the platform has no other way to recognise your session.
7. Client confidentiality
Cookies are used only to operate the platform and, with your consent, to measure how it is used. They are never used to transmit the contents of a matter, a document, or any privileged or confidential client information. Case data is held in our secure infrastructure and governed by our Privacy Policy and your firm’s agreement with us.
8. Changes and contact
If we introduce a new cookie, we will update this page and the “last updated” date above. Where the change requires it, we will ask for your consent again.
Questions about this policy can be sent to privacy@serverity.ai. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk.