1. About this notice
This notice explains how Sponsio uses cookies and similar technologies on its website (the “Service”). It should be read alongside our Privacy Notice and Disclaimer and Terms of Use.
This notice is provided in line with regulation 6 of the Privacy and Electronic Communications (EC Directive) Regulations 2003 (PECR) in the United Kingdom and Article 5(3) of the ePrivacy Directive (2002/58/EC) as implemented in the European Union.
2. What cookies are
Cookies are small text files stored on your device by your browser when you visit a website. They allow a site to recognise the same browser between requests, for example to keep you signed in. We also use the term “cookies” in this notice to refer to similar technologies such as localStorage, sessionStorage and IndexedDB where they are used for comparable purposes by our authentication provider.
3. The cookies we use
We currently use only strictly necessary cookies. Under PECR and the ePrivacy Directive these do not require your consent because they are essential for a service that you have actively requested.
| Cookie / storage | Set by | Purpose | Type | Typical duration |
|---|---|---|---|---|
sb-*-auth-token | Sponsio (via Supabase Auth) | Keeps you signed in to your account between requests and rotates session tokens securely. | Strictly necessary | Up to the lifetime of your session, then refreshed |
sb-*-auth-token-code-verifier | Sponsio (via Supabase Auth) | Completes secure email-confirmation and password-reset flows. | Strictly necessary | Short-lived, deleted once the flow completes |
__Host-next-* and similar Next.js cookies | Sponsio | Operates the application, including secure routing and request-correlation. | Strictly necessary | Session |
Cookie names beginning with sb- are set by Supabase, our authentication provider acting as our processor. They are first-party cookies as far as your browser is concerned: they are set on the Sponsio domain, not on a third-party domain.
4. Cookies we do not use
At the date shown above, the Service does not use:
- analytics cookies (for example Google Analytics, Plausible-cloud, PostHog);
- advertising or marketing cookies (for example Meta, LinkedIn, Reddit, X or Google Ads pixels);
- session-replay or heat-mapping cookies (for example Hotjar, Microsoft Clarity, FullStory);
- A/B-testing or personalisation cookies that profile individuals;
- third-party social-embed cookies (for example embedded YouTube/Vimeo or social-share widgets that drop cookies).
If we introduce any non-essential cookies in future, we will not set them on your device until you have given valid, informed consent through a clear consent mechanism, and we will update this notice to describe them. Refusing such cookies will be as straightforward as accepting them.
5. Your choices
Because we only use strictly necessary cookies, there is no consent banner to accept or reject. You can still control cookies through your browser:
- Most browsers allow you to view, manage and delete cookies for specific sites. Blocking strictly necessary cookies will prevent you from signing in to your account.
- You can sign out at any time using the sign-out control in the Service, which clears the relevant authentication cookies.
6. Changes to this notice
We may update this notice from time to time, in particular if the cookies we use change. The date at the top of the notice indicates when it was last revised. Material changes will be brought to your attention before any new non-essential cookie is set.
7. Contact us
For cookie-related questions, please email privacy@sponsio.com.