Cookie Policy — sose.ai
Status: Draft template. Must be reviewed by a privacy attorney before launch.
Effective Date: [DATE]
1. What cookies are
Cookies are small text files stored on your device when you visit a website. They let us recognize your browser, remember preferences, measure traffic, and run targeted advertising. This policy also covers similar technologies — pixels, tags, local storage, session storage, and SDKs — that function like cookies.
2. Types of cookies we use
Strictly necessary (cannot be disabled)
Required for the site to function. Used for session handling, load balancing, and security.
| Cookie / tech | Provider | Purpose | Duration |
|---|---|---|---|
__vcs | Vercel | Session routing | Session |
cf_clearance | Cloudflare | Bot mitigation | 30 min |
csrf_token | sose.ai | CSRF protection | Session |
Functional
Remember your choices and improve your experience.
| Cookie / tech | Provider | Purpose | Duration |
|---|---|---|---|
sose_chat_session | sose.ai | Preserve AI chat conversation | 24 hours |
sose_address | sose.ai | Pre-fill address on return | 30 days |
consent_state | sose.ai | Remember your cookie choices | 12 months |
Analytics
Help us understand how visitors use the site.
| Cookie / tech | Provider | Purpose | Duration |
|---|---|---|---|
_ga, _ga_* | Google Analytics 4 | Traffic measurement | 24 months |
| Vercel Analytics | Vercel | Page view tracking | Session |
PostHog ph_* | PostHog | Funnel analysis | 12 months |
Advertising & attribution
Track conversions across platforms and enable retargeting.
| Cookie / tech | Provider | Purpose | Duration |
|---|---|---|---|
_fbp, _fbc | Meta Pixel | Ad attribution, retargeting | 90 days |
| Meta Conversions API | Meta | Server-side conversion tracking | N/A (server) |
_gcl_au | Google Ads | Conversion linker | 90 days |
| TrustedForm script | ActiveProspect | TCPA consent certification | Per session |
| Jornaya LeadiD script | Verisk | TCPA consent certification | Per session |
Third-party embeds
If we embed content (e.g., YouTube video), those providers may set their own cookies.
3. Legal basis
- Strictly necessary cookies: legitimate interest (no consent required in the U.S.; required for service)
- Functional, analytics, advertising cookies: your consent where required (e.g., California, EU). We honor Global Privacy Control (GPC) signals as an opt-out request from California residents.
4. How to manage cookies
On sose.ai
Open the Cookie Preferences link in our footer to adjust which cookies we set. You can change your choices any time.
In your browser
Most browsers let you view, delete, and block cookies:
- Chrome: Settings → Privacy and security → Cookies
- Safari: Preferences → Privacy → Manage Website Data
- Firefox: Settings → Privacy & Security
- Edge: Settings → Cookies and site permissions
Blocking all cookies may break parts of the site.
Opt out of advertising cookies
- Meta/Facebook: facebook.com/ads/preferences
- Google: adssettings.google.com
- Industry tools: optout.aboutads.info (DAA), youronlinechoices.com (EU)
Global Privacy Control
If your browser sends a GPC signal, we treat it as an opt-out of "sale"/"sharing" under California law.
5. TrustedForm and Jornaya
We load TrustedForm (ActiveProspect) and Jornaya LeadiD (Verisk) on our lead-submission pages. These scripts record a cryptographically signed certificate of the consent you give, including the form language, your keystrokes, and the submission timestamp. This is required for TCPA compliance and is considered a strictly-necessary compliance tool. These scripts run on any page with a lead form, including the chat.
6. Do Not Track
We do not respond to "Do Not Track" browser signals. We do honor GPC as described above.
7. Changes
We may update this policy as we add or remove tools. Changes are posted with a revised Effective Date.
8. Contact
Gold Alien, LLC Email: privacy@sose.ai
Related policies: