Website Privacy Policy
Last updated October 27, 2026
The short version.
- This policy covers Coho's public pages: the website, the pricing calculator and these legal pages. It applies to them whether or not you have an account. Inside Coho itself (signing in, the administration console, the APIs and the command-line tool) our Privacy Policy applies.
- We use Google Analytics on these pages to learn how people find and use them, but only if you accept. Until you do, nothing of Google's loads.
- You answer once for all of our public pages, and you can change your answer at any time under Cookie settings at the bottom of each page.
- We don't sell personal data or share it for advertising.
- Wherever you live, you can ask us about your data by emailing privacy@coho-cms.com.
1. Who we are and what this covers
CohoWorks, Inc. ("Coho", "we", "us") provides Coho, a managed content platform for businesses. This policy explains how we handle personal data when you visit the pages anyone can read without an account: Coho's website, the pricing calculator, and the legal pages, this one included. For that data we are the "controller" under European data protection law and the "business" under California law.
It applies to these pages whether or not you have a Coho account, and whether or not you are signed in. It doesn't cover what you do inside Coho itself: signing up and signing in, the administration console, the APIs, the command-line tool and the SDKs. The Privacy Policy covers those, and none of them uses analytics.
2. What we collect and why
| What | Where it comes from | What we use it for | Legal basis |
|---|---|---|---|
| Connection data: IP address, browser type, the address of each page or request, and the result | Your browser | Delivering the pages, protecting them from abuse and fixing faults | Legitimate interests |
| What you enter in the pricing calculator: page views, how your pages fetch content, entries, locales, editors, sites, environments, live previews, releases, the features you tick, and any assumptions you change | You | Working out the estimate you asked for. The figures travel in the request to our pricing service, so they are also in the connection data above | Legitimate interests |
| Analytics, only if you accept: the pages you view and the page that sent you, your browser, device type, screen size and language, your approximate location, what you enter in the pricing calculator and the estimates it shows, and whether you select Sign Up Now | Your browser, through Google Analytics | Learning which pages people read, what they look for, and which sites the calculator is used to price, so we can improve the pages and Coho's plans | Consent |
| Your cookie choice, and whether you chose the light or dark theme | You | Remembering your answers, so we don't ask again | Legitimate interests |
| What you send us by email, and our replies | You | Answering you | Legitimate interests |
Legal bases. "Consent" means you agreed to it, and you can withdraw your consent at any time (GDPR Article 6(1)(a)). "Legitimate interests" means it is necessary for our legitimate interests in running secure, reliable pages and answering the people who write to us, and those interests aren't overridden by yours (Article 6(1)(f)). You can object to processing based on legitimate interests (section 8).
You don't have to give us anything to read these pages, and the calculator works whether or not you accept analytics.
3. Google Analytics
If you select Accept, these pages load Google Analytics, which sets the cookies listed in section 4 and sends Google what section 2 describes. If you select Decline, or don't answer, Google Analytics doesn't load at all, and nothing about your visit is sent to Google.
- What it identifies. Google Analytics tells browsers apart by a random ID in a cookie. It doesn't record your IP address: Google uses it to estimate your country and city, then discards it. We don't send Google your name, your email address, or anything else that identifies you.
- What it's not used for. Advertising. Google signals and ad personalization are turned off, so the data isn't linked to your Google account or used to show you ads.
- Who processes it. Google processes analytics data for us under its data processing terms, and its Privacy Policy describes how. Google also offers a browser add-on that turns Google Analytics off on every website.
4. Cookies
Our public pages share their cookies across Coho's domain, so you answer the cookie question once for the website and the pages on our sign-in service together.
| Cookie | Set by | Purpose | Lasts |
|---|---|---|---|
coho-consent | Coho's public pages | Remembers whether you accepted or declined analytics. Set when you answer | A year |
coho-theme | Coho's sign-in and legal pages | Remembers whether you chose the light or the dark theme | A year |
_ga | Google Analytics, only if you accept | Tells one browser apart from another, with a random ID | Two years |
_ga_ followed by an ID | Google Analytics, only if you accept | Keeps track of the current visit | Two years |
Withdrawing your consent under Cookie settings deletes the Google Analytics cookies from your browser. You can also delete any of these cookies in your browser's settings. We'll then ask again.
Do Not Track and Global Privacy Control. Analytics runs only after you select Accept, so without that there is nothing for these signals to turn off. We don't sell or share personal data either way.
5. Who we share it with
We don't sell personal data, and we don't share it for cross-context behavioral advertising. We disclose it only in these cases:
- To service providers that run parts of these pages for us, under contracts that allow them to use it only to provide their services to us:
- Amazon Web Services: hosting, in the United States;
- Google: Google Analytics, only if you accept (section 3).
- For legal reasons. When the law, a court order or other legal process requires it, or to protect the rights, property or safety of Coho, our customers or others.
- In a business transfer. If we are involved in a merger, acquisition, financing or sale of assets, under confidentiality, and the recipient must honor this policy.
- With your consent or at your direction.
6. International transfers
Coho is run from the United States, and these pages are hosted with Amazon Web Services there. Google may process analytics data in the United States and other countries. When we transfer personal data from the European Economic Area, the United Kingdom or Switzerland to a country without an adequacy decision, we rely on the European Commission's Standard Contractual Clauses (with the UK Addendum and Swiss amendments where they apply), or on the recipient's certification under the EU-U.S. Data Privacy Framework and its UK and Swiss extensions. You can ask us for a copy of these safeguards.
7. How long we keep it
- Connection data, including the calculator's figures as they travel to our pricing service: up to 30 days.
- Analytics: Google Analytics keeps event data for 14 months, then deletes it. Reports made from it hold totals, not individual visits.
- Your cookie choice: a year, after which we ask again.
- Emails: up to two years after the conversation ends.
8. Your rights and choices
You can withdraw your consent to analytics at any time under Cookie settings at the bottom of any of our public pages. It is as easy as giving it, and doesn't affect what was collected before.
Wherever you live, you can also ask us to tell you what personal data we hold about you and give you a copy, to correct it, to delete it, or to stop processing based on legitimate interests. Analytics data is held against a random ID rather than your name, so to find yours we may need the _ga cookie's value from your browser. Email privacy@coho-cms.com. We will answer within one month, or within 45 days if California law applies, and we won't charge you or treat you differently for using these rights.
If the GDPR, the UK GDPR or the Swiss Federal Act on Data Protection applies to you, these are your rights under that law, and you can also complain to a data protection authority: in the EEA, the authority where you live or work (list of authorities); in the UK, the Information Commissioner's Office; in Switzerland, the Federal Data Protection and Information Commissioner. We would appreciate the chance to put things right first.
9. California and other US states
In the past 12 months these pages have collected identifiers (an IP address, and the random ID in Google Analytics' cookie if you accepted) and internet or other electronic network activity (the pages you viewed and what you entered in the pricing calculator), from your browser, for the purposes in section 2. We disclosed them to Amazon Web Services and, if you accepted analytics, Google, as our service providers. We have not sold personal information or shared it for cross-context behavioral advertising, including for anyone under 16, so there is nothing to opt out of. The rights in section 8 include California's rights to know, delete and correct, and residents of other states with privacy laws can appeal a decision by replying to it, or by emailing privacy@coho-cms.com with "Appeal" in the subject line.
10. Children
These pages are for businesses. They aren't directed at children, and we don't knowingly collect personal data from anyone under 18.
11. Changes to this policy
When we update this policy, we change the date at the top. If a change affects what analytics collects, we will ask for your consent again.
12. Contact
Privacy questions and requests: privacy@coho-cms.com. Anything else: support@coho-cms.com. By post: CohoWorks, Inc., 45 Main St Ste 240 PMB 820542, Brooklyn, New York 11201-1098, US.