Cookie Policy
Last updated: May 24, 2026.
SocialScalr uses cookies and similar technologies (local storage, IndexedDB, service workers) to operate the Service. We do not use advertising cookies. We do not load third-party trackers on our marketing site without your consent.
1. What is a cookie?
A cookie is a small text file a website asks your browser to store on your device. It lets the site recognise you on your next visit. Similar technologies (local storage, IndexedDB) serve the same purpose with more storage.
2. The cookies we set
| Name | Purpose | Type | Lifetime |
|---|---|---|---|
| sb-...-auth-token | Your Supabase authentication session | Strictly necessary | 30 days, refreshed on activity |
| ss-prefs | UI preferences (theme, sidebar collapse) | Functional | 1 year |
| ss-ref | Affiliate referral code (only set when ?ref= is in the URL) | Functional | 30 days |
| cf_clearance | Cloudflare DDoS protection | Strictly necessary | Up to 1 year, set by Cloudflare |
| __cf_bm | Cloudflare bot management | Strictly necessary | 30 minutes |
3. Local storage and IndexedDB
The SocialScalr dashboard uses your browser's local storage to keep small UI state (which tab you were on, draft post content you have not saved yet). The service worker (for offline / PWA support) caches static assets in CacheStorage. None of this is shared with third parties.
4. Cookies we do NOT use
- Advertising cookies
- Cross-site tracking pixels
- Facebook Pixel, Google Ads conversion tags, or similar
- Session replay tools (FullStory, LogRocket, Hotjar)
If we ever add analytics to the marketing site, we will use a privacy-respecting tool (such as Cloudflare Web Analytics or Plausible) that does not set tracking cookies, and we will update this policy first.
5. Third-party cookies on the dashboard
When you load the dashboard, our payment processor Square sets its own cookies inside its embedded payment iframe. These are controlled by Square's Privacy Notice.
6. How to control cookies
Most browsers let you block or delete cookies in their privacy settings. Blocking the "Strictly necessary" cookies above will prevent you from signing into SocialScalr.
We honor the Global Privacy Control (GPC) signal from your browser as an opt-out of any sale or sharing of personal data (we do not sell or share for advertising in the first place, but GPC reinforces that choice on our marketing site).
7. Changes
If we materially change this policy we will update the date above and, where required by law, ask for your consent.
Companion policies: Privacy Policy - Terms of Service - Data Processing Addendum - Acceptable Use