Cookie Policy
Effective: May 9, 2026 · v1.0
Plain-language summary
We use a small number of cookies and equivalent local-storage keys to keep you signed in, process payments, remember your interface preferences, and understand how the Service is used at an aggregate level. We do not use third-party advertising cookies, cross-site retargeting, or fingerprinting. We honor Global Privacy Control as a valid opt-out signal in every jurisdiction whose law recognizes it.
1. What is a cookie?
A cookie is a small text file that a website stores on your browser. It can hold a session token, a UI preference, an analytics ID, or any other short string. Cookies are read on the server (when your browser sends them with each request) or in the browser by JavaScript. We also use localStorage and sessionStorage, which are similar storage mechanisms that don’t travel with every request — for the purposes of this policy and applicable law, we treat them equivalently.
Cookies are commonly classified by:
- First-party (set by us, on our domains) vs third-party (set by a service we embed).
- Session (deleted when the browser closes) vs persistent (kept for a stated duration).
- Strictly necessary (required to deliver the Service you requested) · Functional (preferences, non-essential improvements) · Analytics (usage measurement) · Advertising (we do not use this category).
2. Cookies we use
The table below lists every cookie or storage key the Service may set, what it’s for, and how long it persists. Where a third party is the issuer, that third party is identified explicitly so you can review their own cookie policy.
| Name(s) | Provider | Purpose | Duration | Category |
|---|---|---|---|---|
| __session, __clerk_* | Clerk Inc. | Authentication session, CSRF protection | Session – 7 days | Strictly necessary |
| __cf_bm, cf_clearance | Cloudflare, Inc. | Bot management, DDoS protection, edge security | 30 minutes – 1 year | Strictly necessary |
| __stripe_mid, __stripe_sid | Stripe, Inc. | Fraud detection during checkout | Session – 1 year | Strictly necessary |
| _vercel_* | Vercel, Inc. | Routing, deployment, locale | Session | Functional |
| sil-consent | Social Intelligence Labs (first-party) | Records your cookie-banner choice so we don't re-prompt | 12 months (localStorage) | Functional |
| sil-brand | Social Intelligence Labs (first-party) | Remembers your selected UI variant | 12 months | Functional |
| ph_* | PostHog, Inc. | Product analytics — page views, button clicks, scan outcomes (no session replay) | 12 months | Analytics |
What we do NOT use: third-party advertising cookies, cross-site retargeting pixels, browser fingerprinting, session replay, or any cookie that exists primarily to identify you across unrelated websites. We do not embed Facebook Pixel, Google Ads conversion tags, or LinkedIn Insight Tag. Session replay is explicitly disabled in our PostHog configuration.
3. Legal basis for setting these cookies
- Strictly necessarycookies are set without consent because they are essential to deliver the service you requested (e.g., keeping you signed in, completing payment). They fall within the ePrivacy Directive Art. 5(3) carve-out and the equivalent CCPA "business purpose" categories.
- Functional cookies are set after a positive interaction signaling consent (e.g., your choice on the cookie banner). They store your interface preferences across visits.
- Analytics cookies (PostHog) require an opt-in in EU/EEA, UK, and Switzerland and are set on consent only. In jurisdictions whose law treats them as opt-out, they are set unless you opt out via the banner or via a Global Privacy Control signal.
4. Cookie banner and your choice
On first visit, a cookie consent banner appears at the bottom of the page where you can Accept or Reject non-essential cookies. Your choice is recorded in localStorage (under the key sil-consent) and the banner does not re-prompt while that record persists. You can change your choice at any time by clearing the storage key or by emailing privacy@socialintelligencelabs.com.
Withdrawing consent does not remove cookies that are already set — your browser is responsible for that — but we will not set additional non-essential cookies after consent is withdrawn, and previously-set analytics IDs will not be associated with new activity.
5. Global Privacy Control (GPC)
We honor the Global Privacy Control signal as a valid opt-out from analytics cookies and from any activity that would be characterized as a "sale" or "share" under U.S. state laws — in California, Colorado, Connecticut, Texas (effective Jan 1, 2025), Oregon (effective 2026), Delaware, New Jersey, New Hampshire, Minnesota, Maryland, and everywhere else GPC is recognized as such. GPC is enforced automatically: when your browser sends the signal, we treat it as equivalent to clicking "Reject" on the cookie banner, and no further interaction is needed from you.
6. How to manage cookies in your browser
Most browsers let you view, delete, or block cookies on a per-site basis. Disabling strictly necessary cookies will prevent the Service from working (you will not be able to sign in or check out). Instructions for the major browsers:
- Chrome: support.google.com/chrome/answer/95647
- Safari: support.apple.com — Manage cookies in Safari
- Firefox: support.mozilla.org — Cookies
- Edge: support.microsoft.com — Delete cookies in Edge
7. Third-party cookie policies
The third parties listed in §2 each operate their own cookies under their own policies. If you want to understand exactly what each third party stores or does with their cookie:
- Clerk: clerk.com/legal/privacy
- Cloudflare: cloudflare.com/cookie-policy
- Stripe: stripe.com/cookies-policy/legal
- Vercel: vercel.com/legal/cookie-policy
- PostHog: posthog.com/privacy
8. Changes to this policy
When the cookie roster changes, we update this page with a new effective date. Material changes are also reflected in our privacy-changes log alongside other privacy-policy revisions.
9. Contact
- Privacy questions: privacy@socialintelligencelabs.com
- EU/UK Article 27 representative: Prighter Group — app.prighter.com/portal/16846497002
- Full Privacy Policy: /privacy