1. About this notice
This notice explains how Sponsio uses cookies and similar technologies on its website (the “Service”). It should be read alongside our Privacy Notice and Disclaimer and Terms of Use.
This notice is provided in line with regulation 6 of the Privacy and Electronic Communications (EC Directive) Regulations 2003 (PECR) in the United Kingdom and Article 5(3) of the ePrivacy Directive (2002/58/EC) as implemented in the European Union.
2. What cookies are
Cookies are small text files stored on your device by your browser when you visit a website. They allow a site to recognise the same browser between requests, for example to keep you signed in. We also use the term “cookies” in this notice to refer to similar technologies such as localStorage, sessionStorage and IndexedDB where they are used for comparable purposes by our authentication provider.
3. The cookies we use
We use strictly necessary cookies that keep the Service working, plus optionalcookies that load only after you choose “Allow optional cookies” in our banner: a Reddit advertising cookie that measures campaign performance and PostHog product-analytics storage that records how features are used. Strictly necessary cookies do not require your consent under PECR and the ePrivacy Directive because they are essential for a service you have actively requested.
| Cookie / storage | Set by | Purpose | Type | Typical duration |
|---|---|---|---|---|
sb-*-auth-token | Sponsio (via Supabase Auth) | Keeps you signed in to your account between requests and rotates session tokens securely. | Strictly necessary | Up to the lifetime of your session, then refreshed |
sb-*-auth-token-code-verifier | Sponsio (via Supabase Auth) | Completes secure email-confirmation and password-reset flows. | Strictly necessary | Short-lived, deleted once the flow completes |
__Host-next-* and similar Next.js cookies | Sponsio | Operates the application, including secure routing and request-correlation. | Strictly necessary | Session |
Reddit Pixel (_rdt_uuid, _rdt_em, and related identifiers loaded from redditstatic.com) | Reddit, Inc. | Measures the performance of Sponsio advertising on Reddit (page visits and conversions) so we can attribute sign-ups to specific campaigns. May be used by Reddit for ad targeting on its own platforms. | Advertising / marketing | Up to 2 years |
PostHog (ph_* cookie and localStorage entries loaded from posthog.com) | PostHog, Inc. (EU Cloud) | Optional product analytics. Records which pages and features you use and aggregates them into funnels so we can improve the Service. Loads only after you allow optional cookies. Session replay is disabled, so we do not record your screen. | Analytics (optional) | Up to 1 year |
Cookie names beginning with sb- are set by Supabase, our authentication provider acting as our processor. They are first-party cookies as far as your browser is concerned: they are set on the Sponsio domain, not on a third-party domain.
The Reddit Pixel is a third-party advertising technology provided by Reddit, Inc.When it loads it sends information about the page you visited and a Reddit-assigned identifier to Reddit. Reddit acts as an independent controller for the data it collects through the pixel; please see Reddit’s own Privacy Policy and Cookie Notice for details.
PostHog is a third-party product-analytics provider. We use its EU Cloud, so analytics data is processed in the European Union and PostHog acts as our processor. We have session replay switched off, so PostHog does not record your screen. See PostHog’s Privacy Policy for details.
4. Cookies we do not use
Vercel Analytics note. The Service uses Vercel Analytics for aggregated, first-party site-usage statistics. Vercel Analytics does notset cookies or other identifiers on your device and anonymises IP addresses on Vercel’s servers. Because no information is stored on or read from your device for this purpose, it falls outside the scope of regulation 6 of PECR and is not listed in the cookie table above. See our Privacy Notice for more on how this data is processed.
Other than the Reddit Pixel and PostHog product analytics described above, the Service does not use:
- other third-party web-analytics tools (for example Google Analytics);
- other advertising or marketing pixels (for example Meta, X or Google Ads pixels);
- session-replay or heat-mapping cookies (for example Hotjar, Microsoft Clarity, FullStory) — PostHog session replay is switched off;
- content personalisation or A/B-testing cookies;
- third-party social-embed cookies (for example embedded YouTube/Vimeo or social-share widgets that drop cookies).
If we introduce any further non-essential cookies in future, we will update this notice to describe them.
5. Your choices
You can control cookies on the Service in several ways:
- Optional cookies (PostHog and Reddit):these load only if you choose “Allow optional cookies” in our banner. Choosing “Essential only” stops them loading. You can change your mind later by clearing the
sponsio:cookie-notice:dismissedvalue in your browser’s site storage, which makes the banner appear again. - Reddit Pixel: you can opt out of Reddit personalised advertising at any time from your Reddit account settings (under “Privacy and security”). You can also block the pixel by blocking third-party scripts from
redditstatic.comin your browser or using a tracker blocker; doing so does not affect your ability to use Sponsio. - Most browsers allow you to view, manage and delete cookies for specific sites. Blocking strictly necessary cookies will prevent you from signing in to your account.
- You can sign out at any time using the sign-out control in the Service, which clears the relevant authentication cookies.
6. Changes to this notice
We may update this notice from time to time, in particular if the cookies we use change. The date at the top of the notice indicates when it was last revised.
7. Contact us
For cookie-related questions, please email privacy@sponsio.com.