This Cookie Policy explains the website technologies used by SODL LLC and how to control optional tracking. Cookies are small browser records; local and session storage are related browser storage technologies.
1. How the controls work
Use Privacy & Cookie Choices in the public footer or My Profile. Essential functionality stays on. Site analytics is optional Google Analytics. Targeted advertising is a separate category and is not active: this website has no configured advertising vendors. The controls show effective settings. Save choices changes them; Close or Escape does not.
Previously saved analytics choices are preserved. An old analytics acceptance never enables advertising. A GPC signal prevents targeted advertising and sale/sharing, even if a browser has a stored advertising grant. The Do Not Sell or Share My Personal Information footer link opens these controls. Contact Legal@sodl.com for other privacy rights.
2. Regional differences
Optional tags wait for a hosting-provider regional policy decision. We use approximate IP geolocation, not browser language or timezone. Our prior-consent configuration covers the EEA and applies a conservative prior-consent policy in the UK, Switzerland and Canada without assuming an analytics exemption. A compact banner offers equally accessible Accept, Decline and Manage choices.
Unknown or unreviewed regions have optional tracking off and no automatic popup. You can voluntarily enable site analytics in preferences. Automatic analytics defaults are currently disabled, including for new U.S. visitors, because Google account settings and SODL’s state-law applicability facts have not been confirmed. Where a reviewed regional opt-out default is later enabled, a saved rejection will still override it. Advertising never defaults on in this implementation.
3. Storage inventory
| Name or pattern | Provider | Purpose | Configured duration and category |
|---|---|---|---|
| sb-<project>-auth-token (and chunks) | Supabase / SODL | Sign-in and session renewal | SDK cookie max-age: up to 400 days; server session/token validity can be shorter. Essential. |
| sodl.privacy.choices.v2; sodl.analytics.consent.v1 | SODL local storage | Current independent choices; preserved legacy analytics choice | No automatic expiry; until removed. Essential preference storage. |
| _ga; _ga_<stream suffix> | Google Analytics | Distinguish browser visits and retain session state when analytics is allowed | Google’s documented default is 2 years with renewal. The effective SODL account override has not yet been verified; browser restrictions can shorten storage. |
| sodl.analytics.once.* | SODL local storage | Prevent duplicate confirmed events; internal identifiers are not sent to Google | No automatic expiry; until removed. Written only when a permitted event is accepted. |
| sodl.analytics.debug | SODL session storage | Explicit QA mode in this tab | Tab session; only when explicitly enabled. |
| mapbox.eventData* | Mapbox local storage | Functional map usage, billing and operational diagnostics | No browser storage expiry; SDK may rotate identifiers. Separate from optional Google Analytics. |
GA4 cookie duration is verified against Google’s documented configuration and pinned in our tag. Auth-cookie max-age and Mapbox storage are verified in the installed SDK source. Actual provider cookies may vary with browser limits and account settings; this is not a claim that every listed cookie is present on every visit. No active advertising-cookie duration is claimed.
4. Other providers and browser limits
Requested sign-in and security features use Supabase and Cloudflare Turnstile. Maps and geocoding use Mapbox and include provider operational/billing requests and storage. Optional Mapbox performance-metric collection is disabled. Public reviews can load Google profile images and link to Google Maps; the standalone homepage loads Google-hosted fonts. These requests disclose network information such as IP address to the relevant provider and are separate from our optional GA4 tag. Server-side hosting, email, content and error services do not thereby become browser advertising tags.
Disabling analytics stops its tag and attempts to remove accessible first-party _ga cookies. Advertising is not active; an opt-out or GPC also removes accessible _gcl_, _fbp and _fbc cookies if older integrations left them behind. We do not remove essential sign-in storage. Browser tools can remove other site data, including consent and deduplication markers. We cannot delete third-party or HttpOnly cookies from JavaScript, and a setting here does not erase information previously received by a provider.
Local storage has no automatic browser expiration; it remains until removed by the site, you or the browser. Session storage normally lasts for the tab’s session. Cookie lifetimes can be shortened by browser protections. Privacy choices do not automatically synchronize between different browsers, devices or unrelated website origins. No optional event blocked by a preference is replayed later.
5. Contact and related policy
SODL LLC, 12760 Aberdeen St NE, Suite 120, Blaine, MN 55449. Privacy requests: Legal@sodl.com. Support: Support@SODL.com. See Privacy Policy for other information practices, rights and records-retention obligations. This notice describes the website implementation; it does not claim future advertising integrations are active.