Cookie Policy
What cookies and similar tech we use on slopgrade.ai and related product hosts.
Last updated · November 4, 2026
1. What cookies are
Cookies are small files stored on your device. We also use browser storage (localStorage and sessionStorage) for preferences and drafts. We set no advertising, analytics or social-pixel cookie on either site.
2. Cookies on slopgrade.ai (this marketing site)
| Name | Purpose | Duration | Type |
|---|---|---|---|
| NEXT_LOCALE | The site's language: set from your country on your first visit, or when you switch (EN / FR / ES) | 1 year | Essential |
| sg_attr_v1 (localStorage) | The campaign that brought you (utm_*, ref code, referring host, landing path), passed to the app when you sign up | Until you clear site data | Functional |
Audience measurement uses Plausible, which works without cookies and stores no personal identifier. If that changes, this table and a consent control will be updated first.
3. Cookies on app.slopgrade.ai
| Name | Purpose | Duration | Type |
|---|---|---|---|
| sb-…-auth-token (and its code-verifier) | Keeps you signed in (Supabase Auth) | Session / sign-in lifetime | Essential |
| sg_locale | The app's language | 1 year | Essential |
| gh_oauth_state | Protects the GitHub connection step | 10 minutes | Essential |
| sg_attr_v1 (localStorage, app) | Sign-up attribution, sent once to your account | Until you clear site data | Functional |
| sg-deepscan-overage-dismissed (localStorage) | Hides the Deep Scan API usage banner until tomorrow | Until you clear site data | Functional |
| Drafts (sessionStorage) | Unsent support messages and white-label texts | Until the tab closes | Functional |
During checkout, Stripe's payment form may set its own essential cookies (see Stripe's policy). The app also loads fonts from Google Fonts, which receives your IP address.
4. How to control cookies
Use your browser settings to block or delete cookies and site data. Blocking NEXT_LOCALE or sg_locale only means we pick a language again. Blocking the sign-in cookies breaks sign-in. We do not show a dead “preferences” link: there is no optional cookie to switch off.