Legal

Cookie Policy

Last updated: 5 May 2026 · Applies to ringbackai.co.uk and all RingBack portals

This page explains the cookies and similar storage technologies we use on ringbackai.co.uk, the customer portal at customer.ringbackai.co.uk and the admin portal at admin.ringbackai.co.uk. We follow the UK Privacy and Electronic Communications Regulations (PECR) and the UK GDPR. You can change your choices at any time using the Cookie settings link below or in our cookie banner.

1. What are cookies and similar technologies?

Cookies are small text files placed on your device when you visit a website. We also use localStorage and sessionStorage, which work similarly. PECR treats both as the same — your consent is required for anything that isn't strictly necessary.

2. Categories we use

2.1 Strictly necessary (always on)

These let the site and portals work. We don't ask consent for them because they are required to deliver a service you've asked for.

• rb.anon_id (localStorage, ~1 year). A random pseudonymous identifier we generate so we can count unique visitors without tracking you across other websites. We never share it. We hash your IP address before storing any analytics record.
• rb.session_id (sessionStorage, expires when you close the tab). Lets us count session length on this site only.
• rb.consent (localStorage). Stores your cookie preferences so we don't ask again.
• rb_customer_session and rb_admin_session (httpOnly secure cookies, up to 14 days; customer and admin portals only). Your signed-in portal session. JavaScript cannot read these cookies.
• rb.session and rb.adm.session (localStorage; customer and admin portals only). Non-sensitive signed-in hints used by the portal interface. They do not contain session tokens.

2.2 Product analytics (optional, requires consent)

With your permission we use PostHog (EU region, eu.i.posthog.com) to understand which features matter most to customers, so we can prioritise improvements. PostHog is configured to use localStorage rather than third-party cookies and we have disabled session replay. You can revoke consent at any time using the Cookie settings link.

2.3 Marketing (optional, requires consent)

When we run advertising campaigns we may add a marketing pixel (e.g. Google Ads, LinkedIn) so we can measure whether the campaign is working. Marketing cookies are off by default and only load after you opt in.

3. Third parties

We do not load any third-party trackers without your consent. The site loads:

• Google Fonts (fonts.googleapis.com, fonts.gstatic.com) — to render the page typeface. No cookies set.
• RingBack API (api.ringbackai.co.uk) — first-party, hosted by us on Google Cloud region europe-west1 (Belgium).
• PostHog EU (eu.i.posthog.com) — only after analytics consent.

4. International transfers

Our website hosting (Firebase Hosting) and API hosting (Cloud Run, region europe-west1) are configured for UK/EU service delivery. PostHog data is stored in the EU. Where a supplier processes personal data outside the UK or EEA, including Deepgram (US), Anthropic (US, optional) and ElevenLabs (US, optional), we rely on appropriate transfer safeguards such as UK IDTA/SCCs as described in our Privacy Notice and Data Processing Addendum.

5. Your choices

You can:

• Reject optional cookies in our banner — only strictly-necessary storage is used.
• Re-open the cookie banner at any time using Cookie settings.
• Clear all RingBack storage in your browser settings (this signs you out of any portal).
• Use your browser's "Do Not Track" — when DNT is enabled, we skip optional analytics events and do not load PostHog even if analytics consent was previously given.

6. Changes

We update this page when we add or remove a tracking technology. The "Last updated" date at the top tells you when. Material changes are highlighted via the cookie banner so you can review your choices.

7. Contact

Questions: privacy@ringbackai.co.uk. Our full Privacy Policy is at /privacy.