Cookie policy
Last updated: 6 July 2026
The rules we follow
Cookies in the UK are governed by the Privacy and Electronic Communications Regulations (PECR), as amended by the Data (Use and Access) Act 2025 from 5 February 2026. Strictly necessary cookies need no consent. The 2025 Act also created new exemptions — including first-party statistical analytics with clear information and a free opt-out. Our approach is simpler than the law requires: analytics runs only if you say yes, and you can change your mind at any time below. We use no advertising or cross-site tracking cookies and we sell no data.
Cookies and similar technologies we set
| Name | Type | Purpose | Expiry |
|---|---|---|---|
| sb-* (Supabase) | Strictly necessary | Keeping you signed in securely | Session / refresh window |
| sf_org | Strictly necessary | Remembering which organisation you're working in | Session |
| sf_consent | Strictly necessary | Remembering your analytics choice | 12 months |
| sf_lead_score | Functional | Carrying your readiness-check score into signup | 30 days |
| ph_* (PostHog EU) | Analytics — only with your consent | Understanding which pages and features help sponsors; used only by us, never for advertising | 12 months |
Payment pages are hosted by Stripe, which sets its own strictly-necessary cookies for checkout security — see Stripe's cookie policy. We do not control those.
Your choices
Decline analytics and the site works identically — we just learn less. Change your mind any time:
You can also block or delete cookies in your browser settings (blocking strictly necessary cookies will prevent sign-in from working). Questions: privacy@sponsorfort.com — and see the privacy policy for how analytics data is handled.