This policy covers cookies and similar technologies, such as pixels, tags, local storage, and browser extension storage, used on sopwow.com, in the SopWow customer portal, and by the SopWow recorder extension. It works alongside our privacy policy, which explains your rights in full.
How does consent work on sopwow.com?
- Nothing optional loads first. On your first visit, a banner asks before any analytics or advertising tracker loads. Until you choose, only necessary storage is used.
- Three categories. "Necessary" is always on, because the site cannot work without it. "Analytics" and "Advertising" are separate choices, each off until you turn it on. Allowing one does not turn on the other.
- Equal choices. The banner offers Accept all, Reject non-essential, and Customize. Rejecting takes one click, the same as accepting.
- Change your mind at any time. Select "Cookie preferences" at the bottom of any page to reopen the banner. If you withdraw consent, we stop the trackers at once, delete the cookies they set on sopwow.com, and reload the page without them. Withdrawing does not delete data a provider has already received, and cookies that a provider sets on its own domain are controlled by that provider; the provider tools below show how to reach them.
- Your choice lasts 12 months. After that, or if we change this policy in a way that needs your consent again, we ask again. It is stored on your device with the date you chose and the version of this policy, not on our servers.
- Some pages never run trackers. No analytics or advertising tracker runs in the customer portal, on the sign-in page, or in the product sandbox, whatever you choose.
How do we honor Global Privacy Control?
Global Privacy Control (GPC) is a browser setting that tells websites you do not want your personal information sold or shared. When your browser sends it, as the Sec-GPC: 1 header or the navigator.globalPrivacyControl signal:
- we treat it as an opt-out of the sale and sharing of your personal information, and as a refusal of all non-essential cookies
- the signal takes priority over any choice you made before, including Accept all, for as long as it is on
- we do not show you the banner, because the signal has already made the choice
- no analytics or advertising tracker loads, and the switches in "Cookie preferences" and on the Do Not Sell or Share My Personal Information page stay off while the signal is on
- we record the opt-out of sale and sharing on your device, so the advertising trackers stay off even if you later turn the signal off, until you turn them back on yourself
Which cookies and trackers are on the site?
| Tracker | Category | What it does | Provider | Data collected | Retention | How to opt out |
|---|---|---|---|---|---|---|
| Privacy choices | Necessary | Remembers your banner and Do Not Sell choices, in local storage (sopwow-consent) and a first-party cookie (sopwow_consent) | Uncovered Inc., which operates SopWow | Your choices, when you made them, and the version of this policy | 12 months | Clear site data in your browser, and the banner asks again |
| Global Privacy Control flag | Necessary | Records that your browser sent Sec-GPC: 1, so the page can honor it (sopwow_gpc cookie) | Uncovered Inc., which operates SopWow | Only the fact that the signal was sent | Until you close the browser or the signal stops | Turn off GPC in your browser |
| Sign-in session | Necessary | Keeps you signed in to the portal after you use your email sign-in link (sb-…-auth-token, local storage, portal pages only) | Supabase, our sign-in provider | A session token tied to your account | Until you sign out or the session expires | Sign out, or clear site data |
| Recorder connection | Necessary | Links the recorder extension to your workspace and keeps its settings (extension storage) | The SopWow recorder extension | A connection token and your recorder settings | Until you disconnect or remove the extension | Disconnect or remove the extension |
| Payment session, once card payments are enabled | Necessary | Processes payment and prevents fraud on the payment processor's checkout pages | Our payment processor (for example, Stripe) | Payment details and device details for fraud checks | Set by the processor | Pay by another method, such as invoice |
| Google Tag Manager | Analytics | Loads and manages the Google tags on the site. It sets no cookies of its own | Google LLC | IP address and browser details, to deliver the script | The tag itself keeps nothing | Reject non-essential, or turn off "Analytics" |
| Google Analytics 4 | Analytics | Counts visits and shows which pages, sources, and campaigns people use | Google LLC | A random visitor ID, pages viewed, referring site, clicks and scrolls, device and browser type, and approximate location from your IP address (the IP address itself is not stored) | _ga and _ga_<ID> cookies: up to 2 years. Event data in Google Analytics: 14 months | Reject non-essential, turn off "Analytics", or use Google's opt-out browser add-on |
| Google Ads conversion tracking | Advertising | Tells us when a visit from a Google ad leads to a sign-up, and builds audiences for our ads | Google LLC | Ad click ID, pages viewed, sign-up events, device and browser details, and IP address | _gcl_au and _gcl_aw cookies: 90 days. Google keeps collected data under its own policies | Reject non-essential, turn off "Advertising", opt out on the Do Not Sell page, turn on GPC, or use Google's My Ad Center |
| Meta Pixel | Advertising | Measures visits from Facebook and Instagram ads and builds audiences for our ads | Meta Platforms, Inc. | Pages viewed, ad click ID, browser and device details, IP address, and Meta identifiers if you use Meta | _fbp and _fbc cookies: 90 days. Meta keeps collected data under its own policies | Reject non-essential, turn off "Advertising", opt out on the Do Not Sell page, turn on GPC, or use Meta's ad preferences |
| LinkedIn Insight Tag | Advertising | Measures visits and sign-ups from LinkedIn ads, shows us grouped job and company data about visitors, and builds audiences for our ads | LinkedIn Corporation | Pages viewed, referring page, IP address, browser and device details, time of visit, and LinkedIn identifiers if you use LinkedIn | li_fat_id cookie: 30 days. LinkedIn removes direct identifiers within 7 days and deletes the rest within 180 days | Reject non-essential, turn off "Advertising", opt out on the Do Not Sell page, turn on GPC, or use LinkedIn's advertising settings |
- Privacy choices
- Category
- Necessary
- What it does
- Remembers your banner and Do Not Sell choices, in local storage (
sopwow-consent) and a first-party cookie (sopwow_consent) - Provider
- Uncovered Inc., which operates SopWow
- Data collected
- Your choices, when you made them, and the version of this policy
- Retention
- 12 months
- How to opt out
- Clear site data in your browser, and the banner asks again
- Global Privacy Control flag
- Category
- Necessary
- What it does
- Records that your browser sent
Sec-GPC: 1, so the page can honor it (sopwow_gpccookie) - Provider
- Uncovered Inc., which operates SopWow
- Data collected
- Only the fact that the signal was sent
- Retention
- Until you close the browser or the signal stops
- How to opt out
- Turn off GPC in your browser
- Sign-in session
- Category
- Necessary
- What it does
- Keeps you signed in to the portal after you use your email sign-in link (
sb-…-auth-token, local storage, portal pages only) - Provider
- Supabase, our sign-in provider
- Data collected
- A session token tied to your account
- Retention
- Until you sign out or the session expires
- How to opt out
- Sign out, or clear site data
- Recorder connection
- Category
- Necessary
- What it does
- Links the recorder extension to your workspace and keeps its settings (extension storage)
- Provider
- The SopWow recorder extension
- Data collected
- A connection token and your recorder settings
- Retention
- Until you disconnect or remove the extension
- How to opt out
- Disconnect or remove the extension
- Payment session, once card payments are enabled
- Category
- Necessary
- What it does
- Processes payment and prevents fraud on the payment processor's checkout pages
- Provider
- Our payment processor (for example, Stripe)
- Data collected
- Payment details and device details for fraud checks
- Retention
- Set by the processor
- How to opt out
- Pay by another method, such as invoice
- Google Tag Manager
- Category
- Analytics
- What it does
- Loads and manages the Google tags on the site. It sets no cookies of its own
- Provider
- Google LLC
- Data collected
- IP address and browser details, to deliver the script
- Retention
- The tag itself keeps nothing
- How to opt out
- Reject non-essential, or turn off "Analytics"
- Google Analytics 4
- Category
- Analytics
- What it does
- Counts visits and shows which pages, sources, and campaigns people use
- Provider
- Google LLC
- Data collected
- A random visitor ID, pages viewed, referring site, clicks and scrolls, device and browser type, and approximate location from your IP address (the IP address itself is not stored)
- Retention
_gaand_ga_<ID>cookies: up to 2 years. Event data in Google Analytics: 14 months- How to opt out
- Reject non-essential, turn off "Analytics", or use Google's opt-out browser add-on
- Google Ads conversion tracking
- Category
- Advertising
- What it does
- Tells us when a visit from a Google ad leads to a sign-up, and builds audiences for our ads
- Provider
- Google LLC
- Data collected
- Ad click ID, pages viewed, sign-up events, device and browser details, and IP address
- Retention
_gcl_auand_gcl_awcookies: 90 days. Google keeps collected data under its own policies- How to opt out
- Reject non-essential, turn off "Advertising", opt out on the Do Not Sell page, turn on GPC, or use Google's My Ad Center
- Meta Pixel
- Category
- Advertising
- What it does
- Measures visits from Facebook and Instagram ads and builds audiences for our ads
- Provider
- Meta Platforms, Inc.
- Data collected
- Pages viewed, ad click ID, browser and device details, IP address, and Meta identifiers if you use Meta
- Retention
_fbpand_fbccookies: 90 days. Meta keeps collected data under its own policies- How to opt out
- Reject non-essential, turn off "Advertising", opt out on the Do Not Sell page, turn on GPC, or use Meta's ad preferences
- LinkedIn Insight Tag
- Category
- Advertising
- What it does
- Measures visits and sign-ups from LinkedIn ads, shows us grouped job and company data about visitors, and builds audiences for our ads
- Provider
- LinkedIn Corporation
- Data collected
- Pages viewed, referring page, IP address, browser and device details, time of visit, and LinkedIn identifiers if you use LinkedIn
- Retention
li_fat_idcookie: 30 days. LinkedIn removes direct identifiers within 7 days and deletes the rest within 180 days- How to opt out
- Reject non-essential, turn off "Advertising", opt out on the Do Not Sell page, turn on GPC, or use LinkedIn's advertising settings
Nothing in the Analytics or Advertising rows loads until you agree to that category. Our hosting provider also keeps standard server logs, including IP address, browser type, page requested, and time, to deliver the site and protect it from abuse. Server logs are not cookies and are not used for advertising.
Which trackers count as selling or sharing personal information?
Under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (together, the CCPA), letting advertising partners collect data about your visit for cross-context behavioral advertising is "sharing" personal information, and it may also be a "sale". The Meta Pixel, the LinkedIn Insight Tag, and Google Ads conversion tracking do that, so we treat them as a sale and sharing of personal information. They make up the Advertising category. We run them only with your consent, and you can opt out at any time.
Google Analytics 4 measures how the site is used. Google signals and ad personalization stay off in it unless you have also allowed Advertising.
We do not sell or share customer workspace content, recordings, screenshots, or SOPs, and none of the trackers run in the customer portal.
What are your rights in California, Canada, and Quebec?
- California. You can opt out of the sale and sharing of your personal information on the Do Not Sell or Share My Personal Information page, with Global Privacy Control, by turning off "Advertising" in "Cookie preferences", or by rejecting non-essential cookies. After you opt out, we wait at least 12 months before asking you to opt back in. We will not treat you differently for opting out. Your other CCPA rights are in the privacy policy.
- Canada. Under the Personal Information Protection and Electronic Documents Act (PIPEDA), we collect data through analytics and advertising trackers only with your consent, and you can withdraw that consent at any time through "Cookie preferences". Withdrawing has no effect on your use of the site or the Service.
- Quebec. Under the Act respecting the protection of personal information in the private sector, as amended by Law 25, trackers that can identify, locate, or profile you are off by default. We tell you what each one does before you choose, you turn them on yourself, and you can turn them off again at any time. Our privacy officer's contact details are in the privacy policy.
How can you opt out or clear storage?
- Cookie preferences. Select "Cookie preferences" at the bottom of any page and turn off "Analytics", "Advertising", or both, or choose Reject non-essential.
- Do Not Sell or Share. Use the switch on the Do Not Sell or Share My Personal Information page. It is the same choice as "Advertising" in "Cookie preferences", and it leaves your analytics choice as it is.
- Global Privacy Control. Turn on GPC in a browser or extension that supports it. We apply it on every visit.
- Browser settings. You can block or delete cookies and site data in your browser. If you clear SopWow's site data, you will be signed out of the portal, and the banner will ask again.
- Provider tools. For cookies that providers set on their own domains, use Google's opt-out add-on for Analytics, Google My Ad Center, Meta ad preferences, and LinkedIn advertising settings. Industry opt-outs are at optout.aboutads.info in the United States and youradchoices.ca in Canada.
- The recorder. You can disconnect or remove the SopWow extension at any time from your browser's extensions page. That deletes its stored token and settings.
- Do Not Track. There is no common standard for Do Not Track signals, so we do not act on them separately. Global Privacy Control covers the same choice, and we honor it.
How will we tell you about changes?
We will update this page before we add or change a tracker, and we will ask for your consent again when a change needs it. Effective date: September 25, 2026.
Have a question about cookies or tracking?
Email us and include the page or feature you are asking about.