Cookies
SiteSums uses almost none. Here is the complete list.
| Cookie | What it does | Lasts | Type |
|---|---|---|---|
| Sign-in session sb-*-auth-token | Keeps you signed in after you click the link in your email. Set by our authentication provider, Supabase. Without it the app cannot work. | Until you sign out, refreshed while you use the app | Strictly necessary |
| Referral tag ss_ref | Set only if you arrive through a friend's referral link, so that when you sign up their account is credited. It holds their referral code and nothing about you. | 30 days | Functional — set only on arrival via a referral link |
What we don't do
- No analytics or tracking cookies. We don't use Google Analytics, Meta pixels, or anything like them.
- No advertising cookies. We don't advertise to you and we don't let anyone else.
- No cookies on the pages your clients open. When a client views a quote, portal or approval page, we record that it was opened — on our server, against your document — but we set nothing in their browser.
Why there is no cookie banner
The sign-in cookie is strictly necessary for the service you asked for, which UK law (PECR) exempts from consent. The referral tag is set only when you deliberately follow a referral link, which we treat as your request to be recognised; if you'd rather not be, simply don't use the link — the front page works the same either way. If you'd like the referral tag to ask first, tell us and we will change it.
Local storage
The app remembers small preferences in your browser — for example which month the dashboard was showing. This never leaves your device and can be cleared like any site data.
Controlling cookies
Your browser lets you view and delete cookies at any time. Deleting the sign-in cookie simply signs you out.