Last updated
Cookie Policy
You may have noticed there's no cookie banner here. That is the policy.
This website sets no tracking cookies
The StandardOS marketing site (this site) sets no cookies for analytics, advertising or tracking. We do measure traffic, with Vercel Web Analytics: it identifies a visit by a hash of the request that is discarded after 24 hours, with no cookie and no cross-site identifier, and Vercel already serves every one of these pages, so nothing is exposed to a party that could not already see it. There are no advertising pixels and no third-party tracking. Your theme preference (light/dark) is stored locally in your own browser and never sent to us. Under the Danish cookie rules (implementing the ePrivacy Directive), consent is only required for cookies that are not strictly necessary, and we simply don't set any of those, so there is nothing to consent to and no banner to dismiss.
Cookies in the application
When you sign up or sign in at app.getstandardos.com, we set the cookies that the signup and the login session technically require, and nothing else:
| Cookie | Purpose | Set by | Lifetime |
|---|---|---|---|
sb-*-auth-token | Keeps you signed in (authentication session) | StandardOS (Supabase Auth) | Session / refreshed while active |
sos_attempt | Ties the steps of one signup attempt together, so we can see where signups fail (no email address, no identity) | StandardOS | Up to 7 days, deleted once your workspace exists or you sign in |
sos_origin | Carries the page or campaign a signup link came from, and the referring site, across the sign-in redirect, so the signup record says where it started | StandardOS | 1 hour, deleted once your signup is recorded or the door is walked |
sos-org | Remembers which workspace you chose, for people who belong to more than one; set only when you switch | StandardOS | 1 year, or until you switch again |
nda_<trust center> | Proves you accepted a company's NDA on its trust center, so its protected documents download; set only when you accept | StandardOS | 30 days |
Two things kept in the browser tab, not in a cookie
Both are written by the application in your own browser, live only in the tab you are using, and are never sent to us as such. They are listed here because the rule is about storing anything on your device, not only about cookies:
| Name | Purpose | Set by | Lifetime |
|---|---|---|---|
sos-invite | Holds a partner's invitation while you sign in or create your workspace, so the invitation you clicked is the one you answer | StandardOS | This browser tab, until the invitation is answered |
sos-next | Remembers the page you were heading for when you were asked to sign in, so you land there afterwards | StandardOS | This browser tab, until you arrive |
Strictly necessary cookies like these are exempt from the consent requirement. During checkout, Paddle (our merchant of record) sets cookies in its own checkout under Paddle's privacy policy for fraud prevention, a necessary part of processing your payment securely.
If this ever changes
If we ever introduce analytics or any non-essential cookies, we will ask for your active consent first, with a real choice, per-purpose information, and one-click refusal and withdrawal, and this page will describe every cookie before it ships. Until then: no banner, on principle.