Last updated:
This Cookie Policy explains how Cloakist B.V., trading as Sotion (“Sotion”, “we”, “us”), uses cookies and similar technologies on sotion.so and the Sotion application. It complements our Privacy Policy.
1. What cookies are
Cookies are small text files that a website places on your device. They let the site recognise you on later visits, keep you signed in, remember preferences, and measure how the site is used. We also use similar technologies such as local storage and pixel tags; for simplicity we refer to all of them as “cookies” in this policy.
2. Categories we use
We group what we use into four categories.
Strictly necessary
Required for the Service to work. They keep you signed in, remember the workspace you’re in, protect against cross-site request forgery, and apply security limits. These cannot be turned off.
Examples: Supabase auth tokens, CSRF tokens, session cookies, and sotion_consent (your answer to our cookie banner, kept for a year).
Functional
Remember choices you make to give you a better experience, such as your colour theme (light/dark) and language. We treat these as part of the Service and you can opt out by clearing your browser storage.
Analytics
Help us understand how visitors use Sotion so we can improve it. We use Fathom for website analytics. It counts visits without cookies or other identifiers stored on your device, so it needs no consent and has no setting in our cookie banner.
Marketing
Help us measure how our advertising performs and show relevant Sotion ads on Facebook and Instagram. We use the Meta Pixel on our marketing website, including the blog, and never on sites you publish. How it starts depends on where you are. In the European Economic Area, the UK (with the Crown Dependencies and Gibraltar) and Quebec, and whenever we can’t tell where you are, it starts paused: it sets no cookies and reports nothing to Meta until you accept it in our cookie banner. Elsewhere it runs from your first visit, unless your browser sends a Global Privacy Control signal, and you can opt out at any time in Cookie settings at the bottom of every page. The blog follows the same rules, and one choice covers the blog and the rest of our website. While it runs, the pixel tells Meta which pages you visit, and Meta may link those visits to your Facebook or Instagram account if you have one. We don’t load the pixel in the Sotion application, but if you go from our website into the application without reloading the page, it can keep running until the page reloads.
If the pixel may run for you and you sign up, our servers also tell Meta, once each, when you create your account, start your free trial and make your first payment (with its amount, before tax). We send a scrambled (hashed) copy of your email address and account ID, the identifiers below, and your IP address and browser details, so Meta can match them to our ads. Nothing is sent if you opted out or, where we ask first, haven’t accepted, and opting out later in Cookie settings stops it. See our Privacy Policy for details.
On the same terms, when you arrive through one of our ads or campaign links, we keep which one in a cookie. If you sign up, we keep it with your account, with the amount of your first payment, so we can tell which ads bring paying customers. This stays with us and is never sent to Meta, and opting out deletes it.
Examples: _fbp (a browser identifier) and _fbc (set when you arrive by clicking a Meta ad), each kept for 90 days, and sotion_ad_source (the ad or campaign link you first arrived on), kept for 90 days.
3. Third-party cookies
Some pages embed content or use services run by third parties. These providers may set their own cookies, governed by their own policies:
- Stripe— fraud prevention on checkout pages.
- Cloudflare— security and bot protection.
- Meta— advertising measurement on our marketing website and blog, and of sign-ups, trials and first payments, where marketing cookies are on (see Marketing above).
We do not control cookies set by these third parties; please check their own privacy notices for details.
4. Cookies on sites you publish
Sites you publish through Sotion set the cookies needed to deliver them and, where you turn it on, to authenticate visitors against your access rules. Sotion’s built-in site analytics counts visitors in one of two ways, chosen in each site’s analytics settings. Cookieless counting, the default for new sites, stores nothing on the visitor’s device: our servers compute an identifier from a keyed hash of the date, the site, and the visitor’s IP address and browser, keep only that identifier, and give the same visitor a different one each day and on each site. Cookie-based counting sets _sv, a first-party cookie kept for one year that recognises returning visitors. Where the law requires your visitors’ consent for cookie-based counting, getting it is your responsibility. If you add your own analytics or marketing scripts to a published site, you are responsible for getting the appropriate consent from your visitors and disclosing those cookies in your own cookie notice.
5. Managing your cookies
You can control cookies in several ways:
- Use the cookie banner on your first visit to accept or reject non-essential cookies, where we ask first.
- Turn on Global Privacy Control in your browser: where we don’t ask first, we treat it as opting out.
- Change your preferences any time from the “Cookie settings” link in our footer.
- Use the ad preferences in your Facebook or Instagram account to control how Meta uses your visits for advertising.
- Block or delete cookies through your browser settings. Note that disabling strictly necessary cookies will break the Service.
6. Changes to this policy
We may update this policy as we change the cookies we use. The “last updated” date at the top shows when this policy was last revised. Material changes will be notified in the Service or by email.
7. Contact
Questions about this policy? Email privacy@sotion.so.