Legal
Cookie policy
A plain-language explanation of the cookies and similar storage technologies Spanda uses today, what each one does, and how to turn off the optional ones.
1. What cookies are, briefly
A cookie is a small piece of data a website stores in your browser so that it can remember something across requests. Some cookies are strictly necessary to keep you signed in and to protect you from cross-site request forgery. Others are optional.
Spanda keeps its cookie footprint as small as possible. We do not use third-party advertising cookies, tracking pixels, or cross-site retargeting.
2. Cookies we use today
| Name | Purpose | Type | Lifespan |
|---|---|---|---|
| spanda_session | Stores your authenticated session token (issued by Amazon Cognito). Required to keep you signed in. | Strictly necessary | Session, up to 30 days |
| spanda_csrf | Cross-site request forgery protection token. Verifies that form submissions originate from Spanda. | Strictly necessary | Session |
| spanda_cookie_prefs | Remembers your choices on the cookie consent banner so we do not ask again on every visit. | Strictly necessary | 12 months |
| __cf_bm | Set by Cloudflare to distinguish humans from bots for security. | Strictly necessary | 30 minutes |
Because every cookie above is strictly necessary to deliver the service, no consent is required under ePrivacy or the applicable US state laws. We still display a cookie banner the first time you visit so that you can review this page.
3. Cookies we may add in the future
We may add product analytics cookies once we wire up an analytics provider. If we do, those cookies will be optional, off by default, and we will ask for your consent before setting them. We will update the table above and post a notice on this page at least thirty days before any such change.
4. Other storage we use
- localStorage and sessionStorage: we use a small amount of browser storage to remember your theme preference and in-progress signup wizard state. No authentication tokens are stored in localStorage.
- Hosted payment forms: Stripe and Trolley set their own cookies when you complete payout onboarding on their hosted forms. Those cookies are governed by their respective privacy and cookie policies.
5. How to manage cookies
You can delete cookies or block them through your browser settings. Blocking strictly necessary cookies will sign you out and prevent you from using most of Spanda.
Global Privacy Control is respected. If your browser sends the GPC signal, we treat it as an opt-out of any future sale or sharing of personal information.
6. Related policies and contact
See also the privacy policy, Do Not Sell or Share My Personal Information. Questions can be sent to privacy@spanda.services.