Cookie Policy
Effective October 15, 2026
This Cookie Policy explains the cookies and similar technologies (such as your browser’s local storage) that Arrebol Software LLC uses on UpRush and on uprush.work. It sits alongside our Privacy Policy, which explains how we handle personal information more generally.
In short: inside the Service we use only what is needed to run it and to remember choices you make. Advertising cookies appear only on our public marketing pages and only as your choices allow. Nothing inside a workspace, a client portal or a review link is used for advertising.
1. What cookies and device storage are
A cookie is a small text file a website stores in your browser and reads back on later visits. Local storage and session storage are similar browser features that keep small pieces of information on your device; session storage is cleared when the tab closes. In this policy, “cookies” covers all of them.
First-party cookies are set by UpRush itself. Third-party cookies are set by another company’s service that a page loads.
2. Strictly necessary
Keep you signed in, protect sign-in and integration flows, and remember your cookie choice. The Service cannot work without them, so they cannot be switched off.
| Name | Type | Set by | Purpose | Lasts | Where |
|---|---|---|---|---|---|
| sb-*-auth-token | cookie | UpRush (via Supabase) | Keeps you signed in securely. May be split into numbered parts. | Until you sign out; refreshed while you use the Service | Signed-in app |
| groove_view_as, groove_view_as_org, groove_view_as_member | cookie | UpRush | Remembers which role, client or member an owner or admin is previewing the workspace as. | 8 hours, or until the preview ends | Signed-in app (owners and admins) |
| qbo_oauth_nonce | cookie | UpRush | Protects the QuickBooks connection flow against cross-site request forgery. | 10 minutes | Settings, while connecting QuickBooks |
| uprush_consent | cookie | UpRush | Remembers your cookie choices and a random identifier that ties them to our record of your consent. Never shared. | 13 months | Public pages and the signed-in app |
3. Functional
Remember choices you make, such as your time zone, layout density or the reviewer name you typed, and keep unsent drafts on your device. They stay in your browser and are never used to track you.
| Name | Type | Set by | Purpose | Lasts | Where |
|---|---|---|---|---|---|
| grv_tz | cookie | UpRush | Your browser’s time zone, so dates and deadlines show in your local time. | 1 year | Signed-in app |
| groove:guest-identity | local storage | UpRush | The name and email you typed on a review or share link, so you do not retype them next time. Kept only on your device. | Until you clear your browser storage | Guest review and share links |
| Drafts (per user and field) | local storage | UpRush | Keeps a message or comment you have not sent yet, so it is not lost if the page reloads. | Until sent or cleared | Signed-in app |
| groove:tus:* | local storage | UpRush | Lets a large upload resume where it stopped after a connection drop. | Until the upload finishes | Signed-in app |
| Layout and view preferences (groove:*-density, groove:*-collapsed, groove:library-*, groove.lib.*, groove:comment-img-size, groove:reviewVolume) | local storage | UpRush | Remembers how you like boards, lists, the Library and the review player to look and sound. | Until you clear your browser storage | Signed-in app |
| Shortcuts and hints (groove:emoji-recents, groove.recent-search.*, groove:tour-seen:*, groove:testimonialAsk:*) | local storage | UpRush | Recent emoji and searches, and which tours or prompts you have already seen. | Until you clear your browser storage | Signed-in app |
| uprush:trial-pill-dismissed, grv-preview-refusal | session storage | UpRush | Remembers a notice you dismissed for the rest of this browser tab. | Until the tab is closed | Signed-in app |
4. Advertising
Help us measure whether our ads work and show our ads to people likely to find UpRush useful. They are set only on our public marketing pages, never inside workspaces, client portals or review links.
| Name | Type | Set by | Purpose | Lasts | Where |
|---|---|---|---|---|---|
| _ga, _ga_* | cookie | Google (Analytics) | Measures visits to our public pages and which ads brought people here. | Up to 2 years | Public marketing pages |
| _gcl_au, _gcl_* | cookie | Google (Ads) | Connects a sign-up to the Google ad that led to it, so we know which ads work. | 90 days | Public marketing pages |
| _fbp, _fbc | cookie | Meta (Facebook, Instagram) | Measures our Meta ads and lets us show them to people likely to find UpRush useful. | 90 days | Public marketing pages |
| li_fat_id, lidc, bcookie, li_gc | cookie | Measures our LinkedIn ads and builds audiences of professionals likely to find UpRush useful. | Up to 2 years | Public marketing pages |
5. Your choices
In the EEA, the UK and Switzerland. Advertising cookies are off until you choose “Accept all” or switch them on under “Customize”. Rejecting them is as easy as accepting them.
Everywhere else. Advertising cookies are on by default on our public marketing pages, and you can switch them off at any time with “Do Not Sell or Share” in the notice or “Your privacy choices” in the footer. If your browser sends a Global Privacy Control signal, we treat it as an opt-out and record it.
Changing your mind. Open “Cookie preferences” in the footer of any public page. Your choice applies to the browser you make it in, lasts 13 months, and we keep a record of it, as described in our Privacy Policy.
Strictly necessary and functional storage. These cannot be switched off from the banner, because the Service needs them or because they only remember what you chose. You can clear them at any time in your browser settings; blocking strictly necessary cookies stops you from signing in.
6. Changes
We update this policy whenever we add, remove or change a cookie, and change the “Effective” date above. If we start using a new kind of cookie that needs your consent, we will ask for it before using it.
7. Contact
Questions about cookies can be sent to privacy@uprush.work.