1. What this covers
"Cookies" here means cookies and the equivalent browser technologies: localStorage, sessionStorage, and similar. This policy covers squiid.io and the Squiid dashboard, and forms part of our Privacy Policy.
We put things in three buckets: strictly necessary (always on, because the site cannot work without them), analytics and marketing (both off until you say yes). Nothing in the optional buckets loads before you consent, and you can change your mind at any time using the control in the footer.
2. Strictly necessary
| Name | Type | Set by | Purpose | Expires |
|---|---|---|---|---|
squiid_consent | localStorage and cookie (Secure, SameSite=Lax, Domain=.squiid.io) | squiid.io | Remembers your cookie choices so we do not ask again. Holds {necessary, analytics, marketing, ts, v}: no identifier, nothing sent to a server. The cookie exists so that one answer covers squiid.io and app.squiid.io, which are separate origins and do not share browser storage. | 12 months, or until you clear it or change your choice |
squiid_signup_draft | sessionStorage | squiid.io | Keeps the signup form you are part-way through filling in, in that tab only, so a reload does not lose it. Never sent anywhere until you submit. | When you close the tab |
sq_session | Cookie (HttpOnly, Secure, SameSite=Lax) | squiid.io | Keeps you signed in to the dashboard. Only set after you sign in. | Session, or 30 days if you choose "remember me" |
sq_csrf | Cookie (Secure, SameSite=Lax) | squiid.io | Cross-site request forgery protection on dashboard forms. | Session |
__stripe_mid, __stripe_sid | Cookie | Stripe | Fraud prevention on the checkout and billing pages. Set by Stripe when a payment form loads; required for us to take a payment safely. | 1 year / 30 minutes |
Cloudflare protection cookies (e.g. __cf_bm) | Cookie | Cloudflare | Bot management and rate limiting in front of the site and gateway. | Up to 30 minutes |
These are exempt from consent under the ePrivacy Directive because they are strictly necessary to deliver a service you asked for. You can block them in your browser, but sign-in, checkout and the consent banner itself will stop working properly.
3. Analytics: off until you say yes
If you allow analytics, we load a privacy-respecting, aggregate product analytics script that counts page views, referrers and rough device class so we can see which pages help and which do not. It is configured without cross-site tracking and without advertising identifiers. Retention is 14 months.
Technically, an analytics script on this site is written as <script type="text/plain" data-consent="analytics"> and is only activated by our consent script once you have granted the analytics category. Decline, and it never executes.
4. Marketing: off until you say yes
We do not currently run advertising or retargeting pixels. The marketing category exists so that if we ever add one (measuring whether a campaign brought someone to the site, for instance) it is opt-in from day one and listed here before it runs. Nothing in this category loads today unless you have granted it and we have updated this table.
5. Managing your choices
- On this site: use , in the footer of every page. Changes apply immediately; optional scripts already loaded in this tab stop being used on the next page load.
- In your browser: every major browser lets you block or delete cookies and clear site storage. Clearing storage and cookies for squiid.io deletes
squiid_consent, so the banner will ask again. - Global Privacy Control: if your browser sends a GPC signal we treat it as an opt-out of analytics and marketing for that browser and do not show you a nagging banner about it.
- Do Not Track: there is no agreed standard for how sites should respond to DNT, so we do not rely on it: use GPC or the settings control instead.
Consent is stored in your browser, not on our servers, so a new device or a cleared cache means we will ask again. We re-ask everyone at least every 12 months.
6. Changes and contact
If we add or change a cookie we will update this page and, for anything in an optional category, ask for consent again. Questions: privacy@squiid.io.