Legal
Cookie Policy
Mantis keeps cookies to the minimum. We use strictly-necessary cookies, plus — only if you accept — Google Analytics to understand how our public site is used. There is no advertising or cross-site tracking.
Last updated: 9 July 2026
The short version. Simply visiting our public site sets no cookies until you choose. We use Google Analytics to understand how the public site is used, but only if you accept it in the cookie banner — reject it and the analytics script never loads and no analytics cookies are set. Once you sign in to the app, we set an essential cookie to keep your session. We do not use advertising or cross-site tracking cookies.
1. What cookies are
Cookies are small text files stored on your device by your browser. “Strictly-necessary” cookies are those required to provide a service you have asked for — such as keeping you signed in. Under GDPR/ePrivacy rules, strictly-necessary cookies do not require prior consent, but we still tell you about them here. We also list one browser local-storage item we use for the same essential purpose of remembering your notice preference.
2. Cookies we use
| Name | Provider | Purpose | Duration | Type |
|---|---|---|---|---|
sb-<project>-auth-token | Supabase (first-party) | Keeps you signed in by storing your authenticated session. Set only after you sign in to the app. | Session / until sign-out or expiry | Strictly necessary |
slack_oauth_state | Mantis (first-party) | Protects the Slack connection flow against cross-site request forgery (CSRF). Set only while connecting Slack. | ~10 minutes | Strictly necessary |
mantis-cookie-consent | Mantis (first-party, local storage) | Remembers your cookie choice (accepted or rejected analytics, or dismissed the notice) so it is not shown again. This is a local-storage entry, not a tracking cookie. | Persistent until you clear site data | Strictly necessary (preference) |
_ga, _ga_* | Google Analytics 4 (third-party) | Measures aggregate, anonymous usage of our public marketing pages (such as page views) so we can improve them. Set ONLY after you accept analytics in the cookie banner, and never in the signed-in app. | Up to 2 years | Analytics (consent-based) |
3. Analytics & your choice
We use Google Analytics 4 to understand — in aggregate — how visitors use our public marketing pages, so we can improve them. It loads only after you accept analyticsin the cookie banner. If you reject it (or simply ignore the banner), the Google Analytics script never loads and none of its cookies are set. Analytics is never loaded in the signed-in app. You can change your mind at any time by clearing this site’s data in your browser, which resets your choice and shows the banner again.
We do not use advertising pixels, social-media trackers, session-replay, or cross-site tracking of any kind. If that ever changes, we will update this page and extend the consent choice before any such cookie is set.
4. Managing cookies
You can control and delete cookies through your browser settings. Because the cookies above are strictly necessary, blocking them will prevent you from signing in and using the app; blocking them has no effect on browsing the public marketing pages, which set no cookies.
5. Changes to this policy
We will update this page if our use of cookies changes and revise the “Last updated” date above.
6. Contact
Questions about cookies or your data? Email contact@heymantis.ai. See also our Privacy Policy.