Cookie Policy
Document status: Approved v1.0 (2026-07-21) Effective date: 2026-07-21
This Cookie Policy explains how Oak Mountain Digital LLC (“SurveyRock”, “we”, “us”, or “our”) uses cookies and similar technologies when you visit our website at www.surveyrock.com, the SurveyRock application at app.surveyrock.com, or related subdomains (collectively, the “Service”).
This policy supplements our Privacy Policy.
1. What are cookies?
Cookies are small text files stored on your device when you visit a website. They allow websites to recognize your device, remember preferences, and provide functionality.
We also use similar technologies including:
- Local storage — stores data in your browser between sessions
- Session storage — stores data only for the current browser session
- Pixel tags / web beacons — small invisible images used for analytics
- Server logs — records of requests made to our servers
For simplicity, we refer to all of these as “cookies” in this policy.
2. Types of cookies we use
We categorize cookies by purpose. You can manage your preferences via our cookie banner or browser settings (see Section 5).
2.1 Strictly necessary cookies (no consent required)
These cookies are essential for the Service to function. They cannot be disabled.
| Cookie | Purpose | Duration |
|---|---|---|
surveyrock_session |
Maintains your authenticated session | Session or up to 30 days with “remember me” |
csrf_token |
Protects against cross-site request forgery | Session |
cookie_consent |
Records your cookie consent choices | 12 months |
__Host-auth |
Secure authentication state | Session |
2.2 Functional cookies (consent required in EU/UK)
These cookies remember preferences to provide an enhanced experience.
| Cookie | Purpose | Duration |
|---|---|---|
user_locale |
Remembers language preference | 12 months |
theme_preference |
Remembers light/dark mode preference | 12 months |
last_workspace |
Remembers your last accessed workspace | 90 days |
2.3 Analytics cookies (consent required in EU/UK)
These cookies help us understand how visitors use the Service so we can improve it.
| Cookie | Set by | Purpose | Duration |
|---|---|---|---|
ph_* |
PostHog (EU Cloud) | Product and website analytics: feature usage, conversion funnels, session recordings | 12 months |
2.4 Marketing cookies (consent required in EU/UK)
We advertise SurveyRock using Google Ads. With your consent, Google Ads cookies measure whether one of our ads led you to visit or sign up (conversion measurement).
| Cookie | Set by | Purpose | Duration |
|---|---|---|---|
_gcl_au and related _gcl_* |
Google Ads | Measures conversions from our own ads | 90 days |
We use these cookies only to measure our own advertising. We do not use retargeting or remarketing cookies, and we do not share your data with ad networks for their own purposes.
3. Third-party cookies
Some cookies are set by third parties we use to operate the Service. These third parties may collect information about your interaction with our Service.
| Third party | Purpose | Privacy policy |
|---|---|---|
| Paddle | Payment processing (only at checkout) | https://www.paddle.com/legal/privacy |
| PostHog (EU Cloud) | Product and website analytics | https://posthog.com/privacy |
| Vercel | Marketing site hosting | https://vercel.com/legal/privacy-policy |
| Advertising conversion measurement (with consent) | https://policies.google.com/privacy | |
| Cloudflare | Turnstile CAPTCHA (bot protection on signup, login, and survey-taking) | https://www.cloudflare.com/privacypolicy/ |
| BetterStack | Status page | https://betterstack.com/privacy |
| ThriveDesk | Email-based customer support inbox (no in-app widget) | https://www.thrivedesk.com/our/privacy/ |
We require all third parties to comply with applicable data protection law and our Sub-processor agreements. See our Sub-processor List.
4. Why we use cookies
We use cookies to:
- Authenticate you when you log in to the Service
- Protect your account from unauthorized access and fraud
- Remember your preferences (language, theme, last workspace)
- Analyze usage patterns to improve features and fix problems
- Measure marketing effectiveness (only with your consent in EU/UK)
- Provide customer support via our email-based support inbox
Cookies are not used to:
- Track you across other websites, beyond measuring our own advertising campaigns (and only with your consent)
- Build third-party advertising profiles
- Sell your data to data brokers
5. Your choices
5.1 Cookie banner
When you first visit our Service from the EU, UK, or other jurisdictions requiring consent, you’ll see a cookie banner allowing you to:
- Accept all cookies
- Reject non-essential cookies (strictly necessary only)
- Customize your preferences by category
You can change your preferences at any time by clicking “Cookie preferences” in the page footer.
5.2 Browser controls
Most browsers let you control cookies through their settings. You can:
- Block all cookies (may break some Service functionality)
- Block only third-party cookies
- Delete cookies when you close the browser
- Set browser to ask you before accepting cookies
Browser-specific instructions:
Note that disabling strictly necessary cookies will prevent the Service from working correctly.
5.3 Do Not Track (DNT)
Some browsers offer a Do Not Track signal. There is no consistent industry standard for honoring DNT signals, and we do not currently respond to them. We provide granular cookie control through our cookie banner instead.
5.4 Mobile devices
If you use the Service on a mobile device, you can control device identifiers via your device’s privacy settings (iOS: Settings → Privacy → Tracking; Android: Settings → Privacy → Ads).
6. Specific regional information
6.1 EEA, UK, and Switzerland
Under the GDPR and UK DPA, we need your consent for non-essential cookies. Our cookie banner is the consent mechanism. You can withdraw consent at any time. The legal basis for analytics, functional, and marketing cookies is your consent (Art. 6(1)(a) GDPR). The legal basis for strictly necessary cookies is our legitimate interest in providing a secure, functional Service (Art. 6(1)(f)).
6.2 California
Under the CCPA/CPRA, you have the right to know what categories of Personal Information are collected and the right to opt out of sale or sharing. We do not sell Personal Information. You can manage cookie preferences via our cookie banner.
6.3 Other jurisdictions
If your jurisdiction has specific cookie consent rules (Brazil’s LGPD, Canada’s PIPEDA, etc.), we apply equivalent controls where required.
7. Changes to this Cookie Policy
We may update this Cookie Policy from time to time to reflect changes in technology, regulation, or our practices. When we make material changes:
- We update the “Effective date” at the top
- We notify you via in-product notification or email (where appropriate)
- We may show our cookie banner again so you can review your preferences
Historical versions are available upon request.
8. Contact us
For questions about cookies or this policy:
Email: privacy@surveyrock.com