Legal

Cookie Policy

Last updated 1 October 2026 · Effective [TODO: effective date]

We only set essential cookies unless you say yes to more. You can change your mind any time.

What cookies are

Cookies are small text files a website stores in your browser. We also use similar technologies, such as local storage, in the same ways described here. "Cookies" covers them all.

Your choices

When you first visit, we ask whether you're happy with analytics and marketing cookies. Nothing optional is set until you choose. You can change your choice with the Cookie settings link in the footer of every page. If your browser sends a Global Privacy Control signal, we treat it as "essential only". You can also block or delete cookies in your browser settings, but sumoboat's sign-in won't work without essential cookies.

Essential cookies

These are needed for the site and app to work and to keep your account secure, so they don't need consent.

NameSet byPurposeDuration
sw_consentsumoboatRemembers your cookie choices6 months
better-auth.session_tokensumoboat appKeeps you signed inSession lifetime (up to 7 days, renewed while active)
better-auth.session_datasumoboat appShort-lived cache of your session to make the app faster5 minutes
better-auth.state and relatedsumoboat appProtects Google sign-in against forgeryMinutes, during sign-in
sw_oauthsumoboat appProtects the flow when you connect a social account (encrypted)10 minutes
__cf_bm, cf_clearanceCloudflareBot and abuse protectionUp to 30 minutes / up to 1 year

Analytics cookies

Only set if you allow them. They help us understand which pages are useful and where people get stuck.

NameSet byPurposeDuration
None in use yet. [TODO: list the analytics tool's cookies here before adding it.]

Marketing cookies

Only set if you allow them. They tell us whether our ads lead to sign-ups.

NameSet byPurposeDuration
None in use yet. [TODO: list ad pixels, e.g. Meta or LinkedIn Insight Tag, before adding them.]

Third-party content

Our marketing site loads fonts from Google Fonts, which receives your IP address to deliver them but doesn't set cookies. [TODO: self-host the fonts and remove this paragraph.] Free tools that preview posts may load images from the URLs you paste.

Contact

Questions about cookies: privacy@sumoboat.com. See also our Privacy Policy.