Sourced
Sign inSign up
Legal · 005

Cookie Notice

Last updated: [DATE]

This notice describes the cookies and similar storage technologies Sourced uses, and your choices.

What is a cookie?

A cookie is a small piece of data that a website stores in your browser. We use cookies and a small number of similar technologies (browser local storage, session storage) to operate Sourced.

We use the minimum technically necessary, and we do not use third-party advertising or tracking cookies.

What we use

Strictly necessary (always on)

These cannot be turned off because Sourced cannot function without them.

| Cookie | Purpose | Duration | |--------|---------|----------| | sb-access-token | Keeps you signed in | Session + refresh | | sb-refresh-token | Refreshes your session securely | 30 days | | csrf-token | Protects forms from cross-site request forgery | Session | | lang | Remembers your language preference | 1 year |

These are first-party cookies set by Sourced. Some are set by our authentication provider (Supabase) on our behalf.

Analytics (you can opt out)

We use a self-hosted analytics tool (currently [PostHog]) to understand how the platform is used. The analytics:

  • Run on infrastructure we control. Data is not sold or shared.
  • Anonymize IP addresses before storage.
  • Are scoped to sourced.app only.

| Cookie | Purpose | Duration | |--------|---------|----------| | ph_* | Aggregate usage measurement | Up to 1 year |

You can opt out of analytics in Settings → Privacy. Opting out does not affect platform functionality.

What we do not use

  • Third-party advertising cookies.
  • Cross-site tracking pixels (Facebook Pixel, Google Ads, LinkedIn Insight Tag, etc.).
  • Data-broker scripts.
  • Fingerprinting libraries.
  • Session replay or heatmap services that record your actions on the page.

Your choices

In addition to the in-app analytics opt-out:

  • Your browser typically lets you block or delete cookies. Blocking strictly-necessary cookies will prevent Sourced from working.
  • Most browsers honor a "Do Not Track" or Global Privacy Control signal. We treat the GPC signal as an opt-out of analytics for that browser.

Changes

We update this notice when we add or remove a cookie. The "Last updated" date at the top reflects the most recent change.

Contact

  • Privacy: [PRIVACY EMAIL]

Where required by law (e.g., the EU's ePrivacy Directive), we display a cookie consent banner on first visit and obtain consent for the analytics cookie before setting it. Strictly-necessary cookies do not require consent.