Legal
Cookie Policy
Last updated: 06.10.2026
Cookies and Storage We Use
This policy is published by CYVERRA LTD, a company registered in England and Wales (Company No 17172266) with its registered office at Dept 6723, 196 High Road, Wood Green, London, N22 8HH, United Kingdom. These are the cookies and browser storage entries Obsidian sets, in two categories: Necessary and Analytics. Necessary ones cannot be disabled because the platform does not work without them; analytics runs only if you opt in.
__Secure-authjs.session-token
Cookie. Keeps you signed in. Category: Necessary. Kept: Until you sign out or the session expires.
__Host-authjs.csrf-token
Cookie. Protects the sign-in and sign-out forms against cross-site request forgery. Category: Necessary. Kept: Browser session.
__Secure-authjs.callback-url
Cookie. Remembers which page to return you to after signing in. Category: Necessary. Kept: Browser session.
obsidian-currency
Cookie and localStorage. Remembers the currency you chose, so prices are shown and charged in it. Category: Necessary. Kept: 1 year.
obsidian.cookieConsent.v2
localStorage. Remembers your choice in the cookie notice. Category: Necessary. Kept: Until you clear it.
ph_*_posthog
Cookie and localStorage. Product analytics: page views and feature use, linked to your account email and name once you sign in. Set only after you allow Analytics. Category: Analytics. Kept: 1 year.
What We Do NOT Use
We deliberately do not use:
- No analytics without consent. Product analytics (page views and feature usage, never cross-site behaviour) run only if you opt in from the cookie notice, and stay off until you do.
- No tracking cookies. We do not use cookies to follow you across websites or build advertising profiles.
- No advertising or third-party trackers. We do not embed third-party advertising scripts, cross-site trackers, or social media widgets on our site. The only exception is your bank's 3-D Secure verification page during checkout, which may set its own cookies — see “Payments & Checkout” below.
- No marketing cookies. We do not use cookies for advertising, retargeting, or personalization.
Payments & Checkout
Card details pass through our server to the payment processor and are never stored. If your bank asks you to confirm a payment with 3-D Secure, its verification page may set its own cookies; these are governed by your bank's own policies. We set no payment cookies ourselves.
Your Control
Our own Necessary cookies remain active whenever you use the authenticated platform. Our cookie banner lets you review and manage categories: Necessary (always on) and Analytics. Analytics covers product usage measurement by our product analytics provider and loads only after you opt in; we place no marketing cookies at all. You can change or withdraw consent at any time with the button below or the Manage Cookies link in the footer; a withdrawal takes effect on the next page load. You can also configure your browser to block cookies, but this will prevent you from using the authenticated features of the platform, and your bank's 3-D Secure page may need its own cookies to complete checkout.
Changes to This Policy
If we ever need to use additional cookies, we will update this policy and its date, and ask for consent in the cookie notice before any new optional cookie is set.
Questions about cookies? Write to support@obsidian.expert.
Obsidian is operated by CYVERRA LTD, Company No 17172266, registered in England and Wales. Registered office: Dept 6723, 196 High Road, Wood Green, London, N22 8HH, United Kingdom.