Cookie Policy

RideAtrium uses a small number of cookies and similar technologies to operate the Service. This page explains what each one is for and how you can manage them.

Essential Cookies

These cookies are strictly necessary for the Service to function. They cannot be disabled without breaking core functionality.

• Session cookie (next-auth.session-token): Keeps you logged in. Signed, HTTP-only, SameSite=Lax. Required to use the dashboard and mobile web app.
• CSRF token (next-auth.csrf-token): Protects forms against cross-site request forgery. Required for login and signup.

Payment & Fraud Prevention

When you use card payment features, Stripe sets cookies to detect and prevent fraud. These are required by our payment processor and cannot be disabled when using card payments.

• Stripe device ID (__stripe_mid): A unique device identifier used by Stripe to detect fraudulent payment activity. Persistent cookie set by Stripe.js.
• Stripe session ID (__stripe_sid): A session-level identifier used by Stripe during the payment flow for fraud analysis. Expires when the browser session ends.

Third-Party Map Services

RideAtrium uses Google Maps to display routes and calculate distances. When maps are loaded, Google may set cookies on your device.

• Google Maps cookies: Google may set cookies such as NID, CONSENT, and others when map tiles or the routing API are loaded. These are governed by Google's Privacy Policy.

Preferences

• Theme / locale: Set by your browser only. RideAtrium does not currently write theme or locale cookies server-side.

Analytics

We use PostHog (PostHog Inc., 2261 Market St, San Francisco, CA 94114) to collect product analytics — page views, click events, and feature usage. PostHog data is hosted in the United States. PostHog never receives your full email address, phone number, full name, or postal address. The only personal data we send is your account ID and email domain (for example, "gmail.com"). PostHog's privacy notice is available at posthog.com/privacy.

PostHog analytics are only loaded when you choose "Accept all" in the cookie banner. If you click "Essential only" or enable Global Privacy Control, PostHog is never initialized and no PostHog cookie is set. You can opt out at any time by revisiting the cookie banner. To delete all PostHog data tied to your account, email support@rideatrium.com with the subject "PostHog deletion request" — we will purge it within 7 days.

RideAtrium does not use Google Analytics, Meta Pixel, or any third-party advertising tracker.

Managing Cookies

You can clear cookies from your browser settings at any time. Clearing the session cookie will log you out. Most browsers also allow you to block third-party cookies, though this may affect payment and map functionality.

Do Not Track & Global Privacy Control

RideAtrium honors Do Not Track (DNT) and Global Privacy Control (GPC) browser signals. Since we do not use advertising or cross-site tracking cookies, these signals result in no change to our cookie behavior.

Contact

Questions about our use of cookies? Contact us at privacy@rideatrium.com or via the contact page.