Cookie policy
The cookies and browser storage that Usertick uses, why, for how long and how to remove them.
Last updated: November 1, 2026
This cookie policy explains which cookies and similar technologies Usertick Ltd (“Usertick”) uses on its website usertick.com, in the Usertick app at app.usertick.com and its API, and on hosted survey pages, why it uses them, how long they last and how you can remove them. It also summarizes what the Usertick widget stores on the websites of Usertick’s customers. Read it together with the privacy notice, which explains how Usertick uses personal data.
1. Cookies and similar technologies
A cookie is a small file that a website stores in your browser. Local storage and session storage are similar: a website keeps information in your browser, in local storage until it is deleted and in session storage until you close the tab. This policy calls all of them “storage” where the difference doesn’t matter. The storage described here is first-party: it belongs to the Usertick address you are visiting, unless the policy says that another company sets it.
2. usertick.com and docs.usertick.com
usertick.com serves its fonts from its own servers and uses the storage in the table below: one strictly necessary cookie, ut_consent, which keeps your choice about optional cookies, and the cookies of its optional tools (Google Analytics and Microsoft Clarity), which load only as section 8 describes.
| Cookie | Purpose | Lifetime | Category |
|---|---|---|---|
| ut_consent | Keeps your choice about optional cookies on usertick.com: the categories you allowed, the version of this policy, the time of your choice and a random ID that links your choices to Usertick's record of them. | 12 months | Strictly necessary |
| _ga | Set by Google Analytics from Google Ireland Limited. Distinguishes visitors with a random identifier. | 2 years | Analytics |
| _ga_<container-id> | Set by Google Analytics from Google Ireland Limited. Keeps the state of the current visit. | 2 years | Analytics |
| _clck | Set by Microsoft Clarity from Microsoft Ireland Operations Limited. Keeps a random Clarity user identifier, so that visits from the same browser are linked. | 1 year | Analytics |
| _clsk | Set by Microsoft Clarity from Microsoft Ireland Operations Limited. Links the pages of one visit into one recording. | 1 day | Analytics |
| _cltk (session storage) | Set by Microsoft Clarity from Microsoft Ireland Operations Limited. Identifies the browser tab of the visit. | Until you close the tab | Analytics |
Each tool’s provider explains its own use of the data: Google Analytics and Microsoft Clarity.
When you send a form on usertick.com, such as a sales inquiry, a newsletter sign-up or an abuse report, the page loads Cloudflare Turnstile from challenges.cloudflare.com to check that a person, not a bot, is sending it. Turnstile reads technical signals from your browser and connection, such as your IP address, only for that check, and sets no cookie on usertick.com. Cloudflare’s Turnstile privacy addendum has the details.
The documentation site, docs.usertick.com, is hosted by a documentation provider. Usertick has added no analytics or advertising tools to it. The provider’s own usage statistics, such as page views and the feedback that visitors give on a page, run only after you agree to them in the site’s cookie notice.
3. The Usertick app and API: cookies
The Usertick app and its API set the following cookies. Each one belongs only to the address that sets it and is sent only over a secure connection.
| Cookie | Purpose | Lifetime | Category |
|---|---|---|---|
| ut_access | Keeps you signed in. It holds a short-lived access token that the browser can't read from scripts (HttpOnly). | 15 minutes | Strictly necessary |
| ut_refresh | Renews the access token so that you stay signed in. It is replaced each time it is used and can't be read from scripts (HttpOnly). | 7 days from its last use; a session ends 30 days after sign-in at the latest | Strictly necessary |
| __Host-ut_csrf | Protects you against cross-site request forgery. The app sends its value back with every change it asks the API to make. | Same as ut_refresh | Strictly necessary |
| ut_sso_request | Links a single sign-on attempt to your browser while your organization's identity provider confirms who you are. | 10 minutes | Strictly necessary |
| ut_oauth_<provider> | Links the connection of an integration, such as Slack or HubSpot, to your browser while that provider confirms it. Its value is encrypted. | 10 minutes | Strictly necessary |
| ut-tz | Your account's time zone, so that dates appear in your time zone when a page loads. | 1 year; deleted when you sign out | Preference |
| ut-hc | Your choice of a 12-hour or 24-hour clock. It is set only when you choose one. | 1 year; deleted when you go back to automatic | Preference |
Signing out deletes the sign-in and security cookies and the time zone cookie. The survey editor’s preview also writes a test cookie (usertick_test) and deletes it at once, to check that the browser allows storage.
4. The Usertick app: local and session storage
| What | Purpose | Lifetime | Category |
|---|---|---|---|
| Remembered accounts (local storage) | Shows the accounts that signed in on this browser on the sign-in screen: up to 3, each with its email address, name, photo address, sign-in method (with the single sign-on domain where there is one) and the time of the last sign-in. An account is kept only when you check “Remember this account on this device” at sign-in; the box starts unchecked. It holds no password and no token. | Until you remove the account from the sign-in screen, sign in with the box unchecked or clear your browser data; kept after you sign out; only until you close the tab when you turn off remembering preferences (section 9) | Preference |
| AI chat drafts (local storage) | Keeps an unfinished AI chat, such as creating a survey, a dashboard or a workflow, so that you can come back to it. | Deleted when the chat is finished or discarded, when you sign out, or after 30 days | Strictly necessary |
| Tab state (session storage) | Keeps the state of the current tab, such as the organization you are working in, an email you are composing and where the animation on the sign-in page was. | Until you close the tab (the active organization is also kept in local storage) | Strictly necessary |
| Display settings and filters (local storage) | Remembers how you set up the app on this browser, such as the theme, the layout, filters and views, the dashboards, commands and emojis you used recently and the announcements you dismissed. | Until you change the setting or clear your browser data; only until you close the tab when you turn off remembering preferences (section 9) | Preference |
5. Services from other companies in the app
- Sign in with Google. On the sign-in and sign-up pages, the app loads Google Identity Services from accounts.google.com to show the Sign in with Google button and, unless the account you used last signs in with a password or single sign-on, the Google One Tap prompt. Google receives your IP address and browser details when its script loads, and the email address of a remembered account as a hint. Google’s script can set its own cookie (g_state) on the app’s address to remember that you closed the One Tap prompt, and Google sets cookies on its own addresses when you sign in. Google’s privacy policy applies to Google’s use of this data.
- Google Picker. When you choose a spreadsheet from Google Drive for the Google Sheets integration, the app loads Google’s Picker from apis.google.com. It loads only at that moment.
- Payments. Checkout, the billing portal and invoices open on pages run by Stripe and Link, which set their own cookies on their own addresses under their own policies. The app loads no Stripe scripts.
6. Hosted survey pages
A hosted survey page shows a customer’s survey at a Usertick link on usertick.app or at the customer’s own domain, and the storage below belongs to that address. Usertick runs the page for the customer that created the survey, and that customer decides how the responses are used (see the privacy notice). The page sets no cookies. It uses the following browser storage:
| What | Purpose | Lifetime | Category |
|---|---|---|---|
| usertick_link_vid (session storage) | A random visitor ID, created when the survey has variants or when a response that isn't anonymous is sent. It keeps a visitor on the same variant after a reload and is sent with the response. A copy that earlier versions kept in local storage is deleted when the page loads. | Until the tab is closed | Set for the survey owner |
| __usertick_link_user_<link> (session storage) | The user ID and verification code that the survey owner put in the survey link, when the link carries them. The page removes them from the visible address. | Until the tab is closed | Set for the survey owner |
| usertick_country (session storage) | The visitor's country, looked up once per session and only when the survey is limited to certain countries or varies by country. | Until the tab is closed | Set for the survey owner |
The page loads the typeface of the survey’s theme from Usertick’s content delivery network at cdn.usertick.com, so the visitor’s browser doesn’t contact Google Fonts.
7. The Usertick widget on customers’ websites
Customers add the Usertick widget to their own websites to show surveys. On those websites the widget stores information under the customer’s own address: first-party cookies named usertick_ (in local storage when the browser blocks cookies) and session storage. Depending on how the customer sets up its surveys, this includes which surveys a visitor has seen, answered or closed, a random visitor ID, visit counts and the time of the last visit, the pages viewed and the landing page in the current visit, the identity and traits the website passes to the widget, and responses waiting to be sent. Cookies last up to 365 days, and a response waits in the browser for up to 7 days.
The customer decides whether and when the widget loads on its website, which surveys run there and how they are targeted. The customer is therefore responsible for telling its visitors about this storage and for asking for their consent where the law requires it, for example by loading the widget through its own consent tool only after a visitor agrees.
The Cookies and consent page in the Usertick documentation lists everything the widget stores, with each name, purpose and lifetime, and shows how to load the widget only after consent. If you visited a website that uses Usertick, contact that website’s owner about its use of cookies.
8. When Usertick asks for your consent
Under regulation 6 of the Privacy and Electronic Communications Regulations 2003 (PECR) and its Schedule A1, which the Data (Use and Access) Act 2025 added, a website doesn’t need your consent for storage that is strictly necessary to provide a service you asked for, such as signing in, security and keeping what you typed, or for storage that only adapts the appearance or functions of the service to your choices, provided that the website tells you about it clearly and gives you a simple and free way to object. The storage in sections 3 and 4 falls into these two groups, which is why the Usertick app shows no cookie banner, and so does the ut_consent cookie on usertick.com. This policy is the information, and section 9 explains how to object.
The analytics and marketing tools in section 2 are optional. Every visitor to usertick.com, in every country, sees a banner, and no optional tool loads and no optional cookie is set until they choose. Rejecting them doesn’t change how the site works.
Cookie settings, at the bottom of every page on usertick.com, lets you give, change or withdraw your consent at any time. When you withdraw it, the tools stop and Usertick deletes the cookies they set on usertick.com. Usertick keeps your choice in the ut_consent cookie for 12 months, and asks again after that or when the tools it asks about change.
To be able to show the consent it relies on, Usertick keeps a record of each choice for 24 months, without your IP address and without linking it to an account. The privacy notice lists what the record holds.
9. How to remove or block storage
- To object to the preference storage in sections 3 and 4, turn off “Remember my preferences on this device” in the app’s preferences. Usertick then deletes it from that browser at once and keeps your choices only until you close the tab. The strictly necessary storage stays, because the app can’t work without it. You can turn the setting back on at any time.
- Sign out of the app to delete the sign-in cookies, your AI chat drafts and the time zone cookie.
- Remove an account from the sign-in screen, or sign in with “Remember this account on this device” unchecked, to delete it from the remembered accounts.
- Use Cookie settings at the bottom of any page on usertick.com to withdraw your consent to optional cookies. Usertick then deletes the cookies those tools set on usertick.com.
- Clear the site data for usertick.com and app.usertick.com in your browser’s settings to remove everything described here. Your browser’s help pages explain how to clear and block cookies and site data.
If you block the strictly necessary cookies, you can’t sign in to the app. If you remove preference storage, the app goes back to its defaults.
10. Changes and contact
Usertick updates this policy when it changes the storage it uses, and the “last updated” date at the top shows when that last happened. Questions about cookies go to privacy@usertick.com.