Draft for legal review. The operating company's details in [square brackets] are not filled in yet, so this page is not final.
Legal
Cookie Policy
This Cookie Policy explains the cookies Site Monitor (the "Service") uses, and the other services your browser contacts when you use it. The Service is operated by [LEGAL ENTITY NAME] ("we", "us", "our"). Our Privacy Policy explains how we handle personal data more generally.
1. What cookies are
A cookie is a small piece of text that a website asks your browser to store and send back on later visits. A first-party cookie is set by the site you are visiting. A third-party cookie is set by another site whose content appears on the page.
2. Cookies we set
The Service sets only the first-party cookies below. Both are strictly necessary for the Service to work.
| Name | Purpose | Lifetime | Who sets it |
|---|---|---|---|
sm_session | Keeps you signed in. It holds your user ID, an expiry time and a signature that proves we issued it. Scripts on the page cannot read it (HttpOnly), browsers do not send it with requests that other sites start in the background (SameSite=Lax), and on the live service it is sent only over HTTPS (Secure). | 30 days from sign-in, or until you sign out | Site Monitor (first-party) |
sm_owner | Used only in the browser of our own staff, when a platform owner opens a customer's account from our admin console to help with a support request. It holds the staff member's own session so it can be restored afterwards. Customers' browsers never receive it with a value: when you sign in or sign up, we tell your browser to delete it if it is there. | 4 hours, or until the staff member returns to their own account | Site Monitor (first-party) |
Signing out deletes the sm_session cookie from your browser. Changing your password, or deleting your account, ends all of your sign-in sessions on every device. Our public pages, including the pricing page, these legal pages and the public status pages our customers publish, set no cookies.
3. No analytics, advertising or tracking
We do not use analytics, advertising, social media or other tracking cookies, and we do not load analytics or advertising scripts, tracking pixels, or similar technologies. We do not store anything in your browser's local storage or session storage.
4. Other services our pages load
- Fonts. The Geist and Geist Mono typefaces are served from our own servers together with the page, so your browser does not contact a font provider.
- Customer logos. A public status page shows the logo its owner chose, loaded from the address the owner gave us. The site hosting that image can see your IP address and may set its own cookies under its own policy.
5. Stripe's pages
When you choose a plan or open Manage billing, we send you to checkout and billing portal pages hosted by Stripe, our payment provider. Those pages are on Stripe's own website, and Stripe sets its own cookies there, for example to prevent fraud, under the Stripe Cookie Policy. We do not load Stripe's scripts on our own pages.
6. Why there is no cookie banner
Privacy laws such as the EU ePrivacy rules and the UK's PECR require consent before a site stores cookies, except for cookies that are strictly necessary to provide a service you asked for. The only cookies we set are strictly necessary, so we do not ask for consent and do not show a cookie banner. If we ever add a cookie that is not strictly necessary, we will ask for your consent first and update this page.
7. Blocking or deleting cookies
You can block or delete cookies in your browser's settings. Our public pages work without cookies. If you block or delete the sm_session cookie, you will be signed out, and you cannot sign in while it is blocked.
8. Changes
We update this page whenever the cookies we use change, and change the date at the top. If we add a cookie that needs your consent, we will ask for it before setting the cookie.
9. Contact
Questions about cookies or privacy: [LEGAL ENTITY NAME] · privacy@concepcion.work
TermsPrivacyRefundsDPASLAAcceptable useSubprocessorsSecurity