Cookie Policy
What we store in your browser and why.
Effective 2026-10-20 · Version 1.2
This page explains the cookies and similar technologies SONAR uses. It is intended to meet the transparency requirements of the ePrivacy Directive (2002/58/EC), the UK Privacy and Electronic Communications Regulations (PECR) and the GDPR.
1. What is a cookie?
A cookie is a small text file a website places in your browser. Some cookies are strictly necessary for the site to function; others enable analytics or advertising. Under EU and UK law, non-essential cookies require your prior consent. The same rules cover similar technologies such as your browser's localStorage and sessionStorage. SONAR sets no cookies of its own today: it uses localStorage and sessionStorage, as listed below.
2. Essential browser storage (no consent needed)
These items are necessary for SONAR to operate. Without them you cannot stay signed in or keep your settings. All of them are first-party and stay in your browser.
| Name | Purpose | Retention |
|---|---|---|
| sb-<project-ref>-auth-token (localStorage) | Authenticated session with Supabase Auth (access and refresh token) | Until you sign out or the session is revoked |
| sonar_language (localStorage) | Your chosen interface language | Until you change it or clear your browser storage |
| sonar_cookie_consent_v2 | Records your choice in the cookie notice (Accept or Essential only) | 12 months |
3. Analytics and marketing cookies
SONAR does not use analytics, advertising, or third-party tracking cookies. With your consent ("Accept" in the cookie notice), one first-party item measures sign-ups: if you arrive through a link with campaign parameters (ref, page, unlock or utm_*), we keep them, with the landing page and the referring site, in your browser's sessionStorage (sonar_attribution_v1) and copy them to your account when you first sign in. If you choose "Essential only", nothing is recorded or sent; withdrawing consent deletes the item from your browser. Separately, without any cookie or browser storage and whatever you choose, the site counts visits that arrive from another website or a tagged link: it sends the referring site's domain (never the full address), the utm_source / ref value and the page path to our server once per visit, which adds one to a daily total per source type (for example "search engines" or "AI assistants") and keeps nothing else, no IP address, identifier or URL. Our typeface (Inter) is served from SONAR's own servers: your browser does not contact Google Fonts or any other third-party font service.
4. Managing cookies
You can delete existing cookies or block future ones through your browser settings. Blocking our essential cookies will prevent you from signing in. You can re-open the cookie notice at any time via the "Cookie settings" link in the footer.
5. Contact
Questions: privacy@getsonar.report