Cookies & Similar Technologies

This notice applies to buy.attestlayer.com direct-buyer flows, including buyer sign-in requests, direct-buyer Buyer Console sessions reached on console.attestlayer.com, and payment confirmation or redirect steps used to complete a direct-buyer checkout through pay.attestlayer.com. It does not govern partner-only console workflows or the root, verifier, registry, or partner program domains.

1. Storage used in direct-buyer flows

• Strictly necessary browser storage used to keep buyer sign-in, checkout completion, and abuse-prevention steps working.
• Short-lived sessionStorage used during Pilot and Buyer Console handoffs, including direct-buyer pilot-session continuity.
• Payment-provider storage used by Stripe or connected checkout infrastructure to complete payment, reduce fraud, and confirm a successful card checkout.
• Limited analytics storage from PostHog to understand public page usage and improve first-party buyer workflows.

2. What we do not use cookies for

• No third-party ad-network or cross-site behavioral advertising cookies.
• No sale of personal data collected through buyer cookies or similar storage.
• No analytics cookie is used to inspect the contents of uploaded evidence files.

3. How long storage lasts

• sessionStorage lasts until the relevant browser tab or browser session is closed.
• Essential security or payment cookies may be short-lived or may persist for the duration defined by the browser or payment provider.
• Analytics identifiers can persist until they expire naturally or you clear browser storage.

4. Your controls

You can clear or block cookies and similar technologies through your browser settings. Blocking all storage may prevent sign-in links, checkout completion, or Buyer Console handoffs from working correctly.

For broader privacy terms, see /privacy. For processor terms tied to submitted buyer workflow material, see /data-processing-addendum. Current providers are listed at /subprocessors.