Cookie Policy
Last updated: 2 September 2026
We use strictly necessary storage to sign you in and keep the site working, and first-party preference storage to remember choices such as Light or Dark. There is no third-party analytics, advertising or tracking technology on this site. The one optional category stays off until you turn it on, and you can withdraw at any time.
1. What this covers
This policy covers cookies and equivalent browser-storage technologies, local storage and session storage, used on our public website at access.creosystems.io and inside the Creo Access workspace. Local and session storage are not technically cookies, but they store information on your device in a comparable way, so we treat them under the same rules and list them here.
We do not currently use any third-party analytics, advertising, retargeting, social-media or session-recording technology. Nothing on this site sets a cookie belonging to another company for its own purposes, and there is no cross-site tracking to consent to.
Because of this, the only optional category is the delivery of our own product-usage events to an external measurement service. No such service is configured at present, so accepting today does not cause anything additional to be sent. The control exists so that if one is ever added, it cannot start without your consent.
2. The complete inventory
Strictly necessary (not optional). Signs you in, keeps you signed in, protects the account, and remembers the choice you make about optional cookies. Without these the product cannot work, so they are not subject to consent.
| Name | Type | What it does | How long it lasts |
|---|---|---|---|
| Authentication session (sb-…-auth-token) | local storage | Holds the session issued by our authentication provider so you stay signed in between page loads. | Until you sign out or the session expires |
| creo.cookies.consent.v1 | local storage | Records your cookie choice with the policy version and the time, so we do not ask again after a valid choice. | Until you clear it or the policy changes materially |
Preferences and interface state (not optional). Remembers first-party choices you made yourself, such as Light or Dark appearance and whether a panel is open. These are not used to profile you, are never shared, and do not follow you across other websites.
| Name | Type | What it does | How long it lasts |
|---|---|---|---|
| creo_public_theme | cookie | Light or Dark appearance for our public website, shared across our public Creo subdomains. | 1 year |
| creo.public.theme | local storage | Same-origin mirror of the public appearance preference. | Until cleared |
| creo.appearance | local storage | Appearance preference inside the signed-in workspace. | Until cleared |
| sidebar_state, creo.sidebar.collapsed, creo.shell… | cookie | Whether the workspace navigation is expanded or collapsed. | Until cleared |
| creo.onboarding…, creo.guidance…, creo.activation…, creo.beta.welcome… | local storage | Which first-use steps, hints and notices you have already seen, so they are not shown again. | Until cleared |
| creo.rlp.handoff, creo.rlp.pending, creo.ask.handoff, creo.home.composer | session storage | Carries work in progress between two screens in the same visit, for example a Role Launch Pack you asked to continue into an account. | Until the browser tab is closed |
| creo.usage.thresholds.v1 | local storage | Remembers which fair-use notices you have already been shown in the current period, so one notice is not repeated. | Until the usage period ends or you clear it |
Optional product analytics (optional). Lets us send our own product-usage events, which screens and features are used, never the words you write, to an external measurement service, so we can see where Creo Access is confusing. We do not currently use any third-party analytics, advertising or session-recording service, so turning this on today changes nothing that is sent. Nothing in this category runs until you turn it on, and turning it off stops it immediately.
| Name | Type | What it does | How long it lasts |
|---|---|---|---|
| Product analytics delivery | local storage | Sends structured event names and identifiers to an external measurement service. Free text, candidate and client names, transcripts and generated content are excluded structurally, not by policy alone. | No external recipient is configured at present |
3. Your choice, and how to change it
The first time you visit, a notice offers three equally available actions: accept optional cookies, reject optional cookies, or manage your choices in detail. No optional category is preselected, rejecting is one click and takes exactly as long as accepting, and rejecting does not restrict any part of the public website or the product.
Your decision is recorded in your browser together with the policy version and the time it was made, so we do not ask you again on every page. If we materially change what the optional category does, the version changes and we ask again rather than carry your old answer forward.
You can change or withdraw your choice at any time using , which is also linked in the footer of every public page. Withdrawing takes effect immediately for future processing. The current policy version is 2026-09-02.
You can also block or delete cookies and clear site storage in your browser settings. Because our authentication session is held in browser storage, clearing it will sign you out, and preference items such as your appearance choice will return to their defaults.
4. Why strictly necessary and preference storage is not optional
Storage in the strictly necessary category exists only to deliver a service you have asked for: signing you in, keeping you signed in, protecting your account, and remembering the cookie choice itself. Under UK and EU rules this does not require consent, and switching it off would mean the product could not function.
Preference and interface state is first-party, records a choice you made yourself, and is never used to build a profile of you, sold, or shared with another company. We list it in full above so you can see exactly what it is rather than take that on trust.