Cookie Policy

What this covers

Cookies are small files placed on your device. This policy also covers similar technologies we use — localStorage, sessionStorage, service workers and the Web Push subscription store.

We group everything into three categories, plus video players that only load when you press play.

1. Strictly necessary — always on

These are required to deliver the service you asked for. Under Dutch and EU law they do not require consent, and they cannot be switched off.

Name	Type	Set by	Purpose	Expiry
authjs.session-token / __Secure-authjs.session-token	Cookie	Founderboard	Keeps you signed in	30 days
authjs.csrf-token	Cookie	Founderboard	Protects sign-in forms against cross-site request forgery	Session
authjs.callback-url	Cookie	Founderboard	Returns you to the right page after signing in	Session
fb_consent	Cookie	Founderboard	Stores your cookie choices so we stop asking	6 months
Service worker + push subscription	Browser storage	Founderboard	Delivers web push notifications, only if you enable them	Until you disable them
Tool draft state	localStorage	Founderboard	Keeps unsaved work in the working tools from being lost	Until cleared
Landing page visit	localStorage	Founderboard	On a venture's published landing page: notes when this browser last opened it, so one visitor is counted once in six hours. Nothing else is stored, and nothing identifies you	Until cleared
Survey open link	localStorage	Founderboard	On a venture's open survey link: remembers the answering link this browser was given, so coming back resumes it and withdrawing stays possible. Nothing else is stored, and nothing is tracked	Until cleared

2. Analytics — consent required

These only load after you accept them in the cookie banner. Until then no analytics script is loaded and no analytics cookie is set.

Name	Type	Set by	Purpose	Expiry
_ga	Cookie	Google Analytics 4	Distinguishes visitors	2 years
_ga_ZBTCDWFCT7	Cookie	Google Analytics 4	Maintains the analytics session state	2 years
_gid	Cookie	Google Analytics 4	Distinguishes visitors	24 hours

We run Google Analytics with IP anonymisation and Google Consent Mode v2, with every consent signal defaulting to denied.

3. Marketing — consent required

We advertise Founderboard with Google Ads. With your permission we remember which of our ads brought you here, so we can tell whether that ad led to an account — and, if you create one, whether you came back to use it in your first two weeks. Without your permission none of this loads, and an account you create is never linked to an ad.

Name	Type	Set by	Purpose	Expiry
fb_ad_click	Cookie	Founderboard	The Google Ads click id (gclid, gbraid or wbraid) of the ad you came from — added to your account when you sign up	90 days
_gcl_au, _gcl_aw	Cookie	Google Ads	Link a visit to the ad click it came from; measure conversions	90 days
IDE, test_cookie	Cookie	Google (doubleclick.net)	Measuring ads and showing our ads again to people who visited the site	Up to 13 months

We do not run a social media pixel.

4. Embedded video — only when you press play

An accelerator program can put videos hosted on YouTube, Vimeo, Loom or Google Drive in its Academy. The page shows a still image until you press play; only then is that provider's player loaded, and it may set its own cookies under its own policy. Pressing play is your choice for that one video — nothing is loaded in the background, and nothing is remembered for the next one. YouTube videos are played through youtube-nocookie.com, which sets no cookies until the video actually plays. Each video also offers a link to watch it on the provider's own site instead.

Videos a program uploads itself are served by Founderboard and set no cookies.

5. Managing your choices

• In Founderboard — use the Cookie settings link in the site footer to change or withdraw your consent at any time. Withdrawing removes the analytics or marketing cookies set on our own domain at once; a cookie Google sets on its own domain is removed in your browser settings.
• In your browser — you can block or delete cookies through your browser settings. Blocking strictly necessary cookies will stop you from signing in.
• Google Analytics opt-out — Google offers a browser add-on at https://tools.google.com/dlpage/gaoptout.

6. Changes

If we add a cookie or a new tool, we update this table and, where consent is required, ask you again.

Questions: privacy@founderboard.ai.