Cookies Policy
This Cookies Policy explains how Stobio uses cookies and similar technologies on the Stobio website (stobio.com, the "Website"), our sign-up and sign-in pages (account.stobio.com) and the Stobio Platform (the "Platform"). Details on the personal data processed through these technologies are in our Privacy Policy.
1. What Cookies and Similar Technologies Are
A cookie is a small text file stored on your device by your browser when you visit a website. Similar technologies are the browser's own storage mechanisms: localStorage (kept until you delete it) and sessionStorage (deleted when the browser tab is closed). In this Policy we call all of them "cookies".
We use four groups of cookies:
- Strictly necessary — required for the Website and the Platform to work, to keep you signed in and to remember your cookie choice. They do not depend on your consent.
- Preferences — remember choices such as language and theme.
- Measurement (analytics) — let us measure how the Website is used and which channels visitors come from. Used only with your consent.
- Marketing — help us measure our promotional activity on Meta platforms. Used only with your consent.
2. How We Ask for Your Consent
- On your first visit to the Website you see a cookie notice. You can choose "Accept", "Decline" or open "Preferences" to decide on measurement and marketing separately.
- Until you make a choice, no measurement or marketing cookies are used; time spent without answering the notice counts as "no consent".
- Your choice is stored in your browser and remembered until you change it or clear your browser data.
- You can change your choice or withdraw your consent at any time via the "Cookie preferences" link at the bottom of the Website's home page and blog pages. When you withdraw consent, the related identifiers are deleted from your browser, at the latest on the next page load on the Website.
- The pages that hold our legal documents (including this one) and the checkout page contain no measurement or marketing code; they also have no preferences link, so please change your choice from the home page.
3. Cookies Used on the Website (stobio.com)
| Name | Provider | Purpose | Retention | Type |
|---|---|---|---|---|
| stobio_consent | Stobio | Remember your cookie choice. | Cookie: 180 days; localStorage backup: until you delete it | Strictly necessary |
| stobio_audit_sent | Stobio | Technical flag so that the measurement code scans the other tags on the page only once per visit. Contains no personal data. | sessionStorage: until the tab is closed | Strictly necessary (technical) |
| stobio_cid | Stobio | Randomly generated visitor ID used to recognise a returning browser. | localStorage: until you withdraw consent or delete it (if browser storage is unavailable, a cookie: 2 years) | Measurement |
| stobio_sid | Stobio | Measure page views within the same visit together. | sessionStorage: until the tab is closed | Measurement |
| _fbp | Meta | Lets the Meta Pixel recognise your browser. Valid on stobio.com and all of its subdomains. | Set by Meta (90 days according to Meta); deleted when you withdraw consent | Marketing |
| _fbc | Meta | Stores click information if you arrived by clicking a Meta ad. | Set by Meta (90 days according to Meta); deleted when you withdraw consent | Marketing |
| lastExternalReferrer, lastExternalReferrerTime | Meta | Lets the Meta Pixel remember which external source you last came from. | localStorage: until you withdraw consent or delete it | Marketing |
3.1. If You Consent to Measurement
Stobio's own measurement code (the Stobio loader) sends interactions on the Website (page and section views, opening FAQ items, clicking the sign-up link and similar) to Stobio's servers (api.stobio.com) together with the page address, the previous page you came from, campaign parameters (UTM), screen and window size, language, time zone and browser information. If you also consented to marketing, ad click identifiers (e.g. gclid, fbclid) and Meta cookies are added. The server additionally records your IP address and the approximate location (country, city) and device type derived from it. Your IP address and full browser information are deleted by a daily automatic clean-up 30 days after the event; the country, city, device type, browser and operating system derived from them are kept.
This data is used in Stobio's own reports and forwarded to Google Analytics 4 (Google); your IP address is not sent to Google. When you click the sign-up link, your visitor ID and marketing choice are added to the sign-up page address and passed to account.stobio.com; if you complete sign-up, the sign-up event is linked to this visit. Your email address, company name and password are not part of this event.
3.2. If You Consent to Marketing
The Meta Pixel is loaded (connect.facebook.net) and creates the _fbp cookie. Because the Meta Pixel's automatic features are enabled, Meta may also collect page interactions such as button clicks.
If you consented to both measurement and marketing, additionally:
- your browser sends events such as page views directly to Meta, together with the page address, title and description, screen information and the
_fbpvalue; - Stobio's server forwards all interactions listed in 3.1 (including the record of your consent choice) and the completed sign-up event to Meta via the Meta Conversions API: IP address, browser information,
_fbp/_fbc, visitor ID, language and page address.
The same event arriving from the browser and from the server is matched as a single event on Meta's side. Meta processes this data under its own policies.
3.3. If You Do Not Consent
The measurement code keeps running but does not create a visitor ID and does not write measurement or marketing cookies to your browser; the Meta Pixel is not loaded. Interactions are sent to Stobio's servers without an identifier: page address and campaign parameters (UTM), the previous page you came from, screen and window size, language and time zone. For these records your IP address, full browser information and ad click identifiers are not stored; instead the country and city derived from your IP address and the device type, browser and operating system derived from your browser information are kept. These records are not forwarded to Meta or Google; they are only used in Stobio's own reports for aggregate visit numbers and breakdowns by source, country and device.
4. Cookies on the Sign-Up Pages and the Platform
On the sign-up and sign-in pages (account.stobio.com) and in your dashboard ({slug}.stobio.com) we only use cookies needed for the service to work and to remember your choices; there is no advertising or third-party measurement code there. When you complete sign-up, the sign-up page sends a sign-up event according to the consent you gave on the Website (see 3.1–3.3); if you did not come from the Website, the event is handled as if no consent was given. If you consented to marketing on the Website, Meta's _fbp cookie is also visible on these domains, but it is not used there.
| Name | Purpose | Retention | Type |
|---|---|---|---|
| slmcore-tenant-auth | Keep you signed in to your dashboard. Cannot be read by scripts in the browser (HttpOnly) and is only sent over secure connections. | 8 hours; renewed while you use it, deleted when you sign out | Strictly necessary |
| slmcore-admin-auth | Session cookie used only by authorised Stobio staff signing in to the Stobio admin panel. | 8 hours; renewed while in use, deleted on sign-out | Strictly necessary |
| stobio.tenant.auth.bootstrap | Technical flag used to prepare the dashboard after sign-in. | sessionStorage: until the tab is closed | Strictly necessary |
| stobio.verify-resend.cooldown:… | Prevents the verification email from being resent too often. The key name contains your email address. | localStorage: until you delete it (only the end time of the waiting period is stored) | Strictly necessary |
| stobio.locale | Remember your language. | localStorage: until you delete it | Preferences |
| stobio-tenant-theme | Remember your light/dark theme. | localStorage: until you delete it | Preferences |
| stobio.activeStore.… | Remember the store you last selected in the dashboard. | localStorage: until you delete it | Preferences |
| stobio.onboarding.… | Remember your progress through the setup steps. | localStorage: until you delete it | Preferences |
Payments. The payment steps in the dashboard take you to the checkout page (stobio.com/checkout), which loads Paddle.js from our payment provider Paddle. Paddle may use its own cookies to complete the payment and prevent fraud (e.g. paddlejs_checkout_variant). These cookies are required for the payment service; details are in Paddle's legal documents.
Error tracking. Technical errors in the dashboard are reported to our error-tracking provider Sentry; Sentry does not write cookies to your browser for this purpose.
Cookie names and retention periods may change as the Platform evolves; the lists above reflect usage on the date this Policy was last updated.
5. Customer Sites Using the Stobio Loader
Stobio is a server-side tracking tool. When a Stobio customer installs the Stobio loader on their own website, the loader uses browser storage (localStorage/sessionStorage; a first-party cookie if these are unavailable) on the customer's own domain to recognise visitors for the customer's own measurement. The customer is the controller of this data and is responsible for managing cookie choices on their site. Stobio does not set cookies on third-party domains for cross-site tracking. If you are a visitor of a customer's site, please direct your questions to the owner of that site.
6. Managing Cookies in Your Browser
In addition to the "Cookie preferences" link on the Website, you can delete or block cookies and browser storage in your browser settings:
- Chrome — Settings → Privacy and security → Third-party cookies / Site data
- Firefox — Settings → Privacy & Security → Cookies and Site Data
- Safari — Settings → Privacy → Manage Website Data
- Edge — Settings → Cookies and site permissions
If you clear your browser data, your cookie choice is deleted too and the notice is shown again. If you block strictly necessary cookies, parts of the Platform may not work correctly (for example, you may be unable to sign in).
7. Personal Data
The personal data processed through cookies, the legal basis, the recipients and your rights are described in detail in our Privacy Policy.
8. Changes to this Policy
We update this Policy whenever the technologies we use change. The most recent version is always available on this page.
9. Contact
For questions about cookies please contact: support@stobio.com