SiteSphere — Legal
Cookies
Effective date: 2026-04-29
We use cookies sparingly. The marketing website at https://sitesphere.com.au uses essential cookies and (where you consent) analytics. The authenticated application at https://app.sitesphere.com.au uses session cookies only — no third-party trackers.
Marketing site (sitesphere.com.au)
Essential cookies
These cookies are required for the website to work. They cannot be disabled without breaking the site.
- Session cookies — set by Next.js for server-side rendering and route handling. No personal information is stored.
Analytics cookies (with consent)
Where enabled, the marketing site uses Google Analytics 4 to measure page views and conversion events on the public marketing pages only. Analytics tracking does not extend into the authenticated app.
- Google Analytics 4 — measures aggregate visitor behaviour. We use IP anonymisation and short retention (14 months). You can opt out by installing the official Google Analytics opt-out browser add-on, or by enabling "Do Not Track" in your browser.
We do not use marketing or advertising cookies on the website. We do not embed third-party social media buttons that drop cookies on page load.
Authenticated app (app.sitesphere.com.au)
Session and authentication cookies
These are required to keep you signed in and to enforce row-level security on every database query.
- Supabase auth cookies — JWT-based session token (access token) and refresh token. HttpOnly, Secure, SameSite=Lax. Set by Supabase Auth and cleared on sign-out.
We do not use any analytics or tracking cookies inside the authenticated app. The data we collect about your usage of the app comes from server-side request logs only — never from third-party trackers running in your browser.
Mobile app
The SiteSphere mobile apps for iOS and Android use device keychain / secure storage for session tokens — they do not use browser-style cookies. Push notification tokens are registered with Apple Push Notification Service and Firebase Cloud Messaging through the platform's standard mechanisms.
Managing your preferences
- Most browsers let you delete cookies, block cookies from specific sites, or block third-party cookies entirely. Doing so will not break the marketing site.
- Disabling Supabase auth cookies will sign you out of the authenticated app.
Questions
Email privacy@sitesphere.com.au.