Cookie Policy
This is a short policy because we use a short list of cookies.
Effective September 1, 2026
1. Cookies we set
All of them are strictly necessary for the Service to work:
- Session cookie (signed): keeps you signed in to your dashboard for up to 30 days. Removed on sign-out.
- Security cookie: protects sign-in and forms against cross-site request forgery.
2. Cookies we do not set
No advertising cookies, no cross-site tracking, no social pixels, no third-party analytics cookies, and no fingerprinting. The marketing site can be read signed-out with no cookies at all.
3. The embedded widget
When a business embeds its agent, the widget runs in an isolated frame. It does not set tracking cookies on the business's site and does not read anything about the visitor beyond what they type to the agent.
4. Managing cookies
Because everything we set is strictly necessary, there is no consent banner to click. You can clear or block cookies in your browser at any time; signing in simply will not persist without the session cookie.
Questions: privacy@getsitora.com.