Cookies & Tracking
Last updated 28 July 2026
On trellos.org today, that means: no advertising, analytics, pixels, or session replay — which is why you were not shown a cookie banner.
What this website uses
trellos.org serves marketing pages and forms. It loads no third-party advertising or analytics scripts, and does not use Google Analytics, a tag manager, an advertising pixel, a heatmap, or session-recording software.
You can check rather than take our word for it: open your browser’s developer tools, look at Storage and Network, and you will find an empty cookie jar and no third-party requests.
Why there is no cookie banner
Consent banners exist for cookies that are not strictly necessary — advertising and analytics, mostly. We do not set any, so there is nothing to ask you about. A banner here would be decoration, and asking permission for nothing is how people learn to dismiss the requests that actually matter.
What the trellOS application uses
The signed-in application at app and admin is a different matter — it needs to know who you are between clicks. Those cookies are strictly necessary: they exist to sign you in and keep you signed in, and the app does not function without them.
| Cookie | Purpose |
|---|---|
| __session | Your signed-in session, set by our authentication provider. |
| trellos_active_org | Which of your organisations you are currently viewing, when you belong to more than one. |
| trellos_admin_session | Internal staff sign-in for the admin application. |
| trellos_break_glass | Marks an active emergency-access session so it can be shown on screen and audited. |
None of these track you across other websites, and none are used for advertising or sold to anyone.
Do Not Track and Global Privacy Control
We have nothing to switch off, so a DNT or GPC signal changes nothing about what we do — there is no tracking to suppress.
Server logs
Our hosting provider keeps standard request logs (IP address, page requested, timestamp) as part of running and securing the service. That is infrastructure logging, not cookie-based tracking, and it is not used to build a profile of you.
If you submit the waitlist form we keep your IP and browser user-agent with that submission, including as evidence of SMS consent where you gave it — explained in the Privacy Policy.
If this changes
If we ever add analytics, we will update this page and introduce a real consent mechanism before anything is set — not afterwards. The date at the top tells you when this was last true.
Questions about anything on this page? compliance@trellos.org