Tessera Cookie Policy
Version 1.1 — effective 2026-09-20
This page lists everything tessera.company stores in your browser, and what it is for. It is the detail behind section 3 of the Privacy Policy; where the two say the same thing, they are meant to.
The short version
The website itself sets no cookies. If you accept the banner, Google Analytics sets two, and nothing else changes. If you decline, nothing is stored and nothing is loaded from Google — not the script, not a pixel, not a request that could carry your IP address.
You can change your answer at any time, from the Cookies → Change your choice entry in the footer of every page.
Analytics — only if you accept
We use Google Analytics 4 to count visits and see which pages people read. It is the only measurement on this site: no advertising, no remarketing, no profiling, nothing sold or shared for anyone else’s purposes. Every advertising feature of the tag is switched off in code and stays off.
The Google script is not loaded until you accept. That is stricter than the usual consent banner, which loads the tag immediately and asks it to behave; we would rather Google not receive your IP address at all for a visit you did not agree to measure.
| Cookie | Set by | What it holds | Lifetime |
|---|---|---|---|
_ga | Google Analytics | A random identifier for the browser, so a returning visitor is not counted twice. Not your name, not your email — we cannot connect it to your portal account. | 13 months |
_ga_XBECBLGFLY | Google Analytics | The state of the current visit (when it started, which page). The suffix is our property’s identifier. | 13 months |
13 months rather than the two years Google’s script uses by default: consent older than that is not current consent, so a cookie that outlives it should not exist. When it does expire, the banner asks again.
Stored in your browser, and never sent anywhere
These are not cookies — nothing here leaves your device or reaches our servers.
| Key | What it holds | Lifetime |
|---|---|---|
tessera-consent | Your answer to the banner, and the date you gave it. This is what stops it asking again. | 13 months |
starlight-theme | Whether you chose light or dark on the documentation pages. | Until you clear it |
The live demo stores a few more
The demo at tessera.company/demo is a copy of the console that runs in your browser, so it keeps its own state the way the console does. It is the same site, which is why these belong on this page — and, like everything above, none of it is a cookie and none of it reaches us.
| Key | What it holds | Lifetime |
|---|---|---|
tessera.demo.tour.seen | That you have answered the opening dialogue, so it does not reappear. | Until you close the tab |
tessera.demo.tour.state | Which chapter of the guided tour you are on, and how far, so a reload does not restart it. | Until you close the tab |
tessera.demo.funnel.sent | Which of the anonymous counters described below have already been sent from this tab, so one visitor is not counted twice. | Until you close the tab |
tessera.demo.asked | That you have been shown the email form, so you are not asked a second time. Not the address, and not your answer — only that it was offered. | Until you clear it |
tessera_token, tessera.branding, tessera-theme | The console’s own guest session and display preferences. The demo signs you in as a sample user; the token is for a database that is not there. | Until you clear it |
What the demo sends. Two things, and nothing else. A counter — a number per day per step, with no identifier, no session and no IP address, so it can say how many people reached a step and not who. And, if you type one into the form partway through the tour, an email address. Both are described in section 2 of the Privacy Policy. Nothing about what you do inside the demo is sent anywhere, because there is nothing there to send it to: the console answers from a fixture in your own browser.
The customer portal is a separate matter
The portal at portal.tessera.company sets three strictly necessary cookies — the sign-in session, a CSRF token, and the state of a social sign-in while it is in progress. They are listed with their lifetimes in section 3 of the Privacy Policy. There is no analytics in the portal.
Where the data goes
Analytics data goes to Google Ireland Limited, and to Google LLC in the United States, as our processor. What it receives is set out in section 4 of the Privacy Policy, along with everyone else involved in running this service. Google’s own description of it is in the Google Privacy Policy.
Changing your mind, and refusing without us
On this site: the Change your choice entry in the footer reopens the banner.
Declining also deletes the _ga cookies if they were already set.
In your browser: every browser can block or delete cookies for a site, and doing so here has no effect on anything except the counting — nothing on this site needs a cookie to work. Google also publishes a browser add-on that opts you out of Analytics everywhere.
Questions
legal@tessera.company — see the Privacy Policy for your rights and how to exercise them.