Cookie Policy

Policy version: 2 October 2026

This Cookie Policy explains how Universal Grammar Limited ("we", "our", or "us") uses cookies and similar technologies on our website www.recuity.ai (the "Site"). It should be read alongside our Privacy Policy.

What Are Cookies?

Cookies are small text files placed on your device by websites you visit. They are widely used to make websites work correctly and securely.

Types of Cookies We Use

We use two kinds of cookies:

  • Strictly necessary cookies — essential for the Site to function. They cannot be disabled without preventing access to core features.
  • Analytics cookies — help us understand how the Site is used so we can improve it. These are only set if you accept them, and you can switch analytics off at any time.

We do not use advertising cookies, and we do not share analytics data with advertisers.

Authentication Cookies (set by our application)

User authentication on our Site is managed using WorkOS as our authentication provider. After you complete sign-in, our application sets the following cookies to maintain your session:

  1. app_session
    • Purpose: Stores your encrypted authentication session. This is required to keep you logged in as you navigate the Site.
    • Type: First-party, HTTP-only, secure
    • Duration: Session-based; expires when you log out

During the sign-in flow we also set short-lived temporary cookies (OAuth state, pending session, and return URL) to securely complete the authentication process. These expire within 30 minutes and are deleted automatically once sign-in is complete.

These cookies cannot be disabled without preventing you from logging in.

Anti-Forgery Cookie (set by our application)

  1. .AspNetCore.Antiforgery.[ID]
    • Purpose: Prevents Cross-Site Request Forgery (CSRF) attacks by verifying that form submissions on the Site originate from legitimate users.
    • Type: First-party, security
    • Duration: Session-based; expires when you close your browser

Payment Cookies (set by Stripe)

Payment and subscription processing on our Site is handled by Stripe. When you visit pages that load Stripe's scripts, Stripe may set the following cookies for fraud prevention and payment security purposes:

  1. __stripe_mid
    • Purpose: Fraud prevention and detection. Helps Stripe assess the risk of a transaction.
    • Type: First-party (set on our domain via Stripe.js)
    • Duration: 1 year
  2. __stripe_sid
    • Purpose: Fraud prevention and detection. Used alongside __stripe_mid to verify session continuity during payment flows.
    • Type: First-party (set on our domain via Stripe.js)
    • Duration: 30 minutes

Stripe's use of these cookies is governed by Stripe's Privacy Policy.

Cookie Preference Cookie (set by our application)

  1. rc_consent
    • Purpose: Remembers your answer to the cookie banner, so we do not ask again on every page and so your choice about analytics is respected.
    • Type: First-party, strictly necessary
    • Duration: 180 days

Analytics (provided by PostHog)

We use PostHog, hosted in the European Union, to understand how the Site is used: which pages are visited, how visitors move between them, and which features are used. How this works depends on your answer to the cookie banner:

  • Before you answer — visits are counted anonymously. No analytics cookie is set and nothing is stored on your device. PostHog counts visits using an anonymous identifier calculated on its servers that changes every day, so it cannot be used to recognise you from one day to the next.
  • If you accept — the cookie below is set so that we can recognise a returning browser. If you are signed in, usage is associated with your account identifier and organisation.
  • If you switch analytics off — the analytics cookie and stored data are deleted, and we collect no analytics about your visits.
  1. ph_[project ID]_posthog
    • Purpose: Holds a randomly generated identifier for your browser and the current visit, so that page views from the same browser can be counted together.
    • Type: First-party, analytics. The same information is also kept in your browser's local and session storage under names beginning with ph_.
    • Duration: 180 days

We do not record your screen or your keystrokes. PostHog's handling of this data is described in PostHog's Privacy Policy.

Managing Cookies

You can accept analytics cookies from the cookie banner, or change your choice at any time using the Cookie settings link at the bottom of every page. Switching analytics off there stops all analytics for your browser and deletes the analytics cookie.

Strictly necessary cookies cannot be switched off through our Site without losing access to core features. If you wish to remove or block cookies, you may do so through your browser settings, but doing so will prevent you from logging in or using parts of the Site that require authentication.

For guidance on managing cookies in your browser, visit www.aboutcookies.org.

Changes to This Policy

We may update this Cookie Policy from time to time to reflect changes in the cookies we use or legal requirements. When we do, we will update the version date at the top of this policy.

Contact Us

If you have any questions about our use of cookies, please contact us at:

Email: [email protected]
Address: Universal Grammar Limited, 27 Old Gloucester Street, London, United Kingdom, WC1N 3AX