Cookie Policy
Short version: SDSentry sets one cookie of its own so we can remember you're signed in, and two first-party measurement cookies so we can see which pages lead to sign-ups. They hold a random ID, never your name or email, and are not shared. Google Analytics and Google Ads set measurement cookies so we can count visits and see which ads lead to sign-ups. You can block those and the site still works.
The cookies we set
| Name | Purpose | Type | Lifetime |
|---|---|---|---|
sds_session |
Stores a random opaque session token that identifies your browser to our server, so you don't have to sign in on every page. | Strictly necessary · HttpOnly · Secure · SameSite=Lax · first-party | 30 days, or until you sign out (whichever is first). |
sds_aid |
A random visitor ID, so we can count how many different people reach each step of sign-up (visit, sign-up, first chemical added, subscription) without knowing who they are. | Analytics · HttpOnly · Secure · SameSite=Lax · first-party · not shared with anyone | 1 year. |
sds_ft |
The page you first arrived on, the site that referred you, and any campaign tags in the link you followed, so a sign-up can be credited to the page or campaign that brought it. | Analytics · HttpOnly · Secure · SameSite=Lax · first-party · not shared with anyone | 1 year. |
_ga, _ga_* |
Google Analytics 4: counts visits and pages viewed so we know which pages are useful. | Analytics · set by Google's script on our domain | Up to 2 years. |
_gcl_* |
Google Ads: records that a visit came from one of our ads, so we can measure which ads lead to sign-ups. | Advertising measurement · set by Google's script on our domain | Up to 90 days. |
We also run Umami, a cookieless analytics tool hosted on our own servers; it sets no cookies. Our analytics do not load for automated browsers.
What we don't do
- We do not use Facebook Pixel, TikTok Pixel, or any advertising tag other than the Google Ads conversion tag above.
- We do not sell data to advertisers.
- We do not fingerprint your device using canvas, WebGL, or any other browser characteristic.
- We do not use localStorage or sessionStorage for tracking. (We did use localStorage briefly for inventory caching during the single-tenant version of the app; that data is migrated to the server-side database and the localStorage key is removed on first load.)
Turning cookies off
Because sds_session is a strictly-necessary authentication cookie, blocking it will prevent you from signing in. You can clear it any time by signing out, by clearing your browser's cookies, or by using a private / incognito window.
Cookies on third-party services we link to
When you click through to PayPal to subscribe, PayPal will set its own cookies on its own domain. We don't control those cookies — see PayPal's privacy policy at paypal.com/us/legalhub/privacy-full.
Questions
Email dale.weaver@0xpi.com.