Cookie Policy

On sitegenos.com

We set no analytics, advertising, or tracking cookies. What we do store:

Name	Purpose	Lifetime
sb-*-auth-token (cookie)	Your sign-in session	Persistent (roughly 400 days) by default. Session-only if you untick "Remember this device" at sign-in
sb-*-auth-token-code-verifier (cookie)	A one-time value that completes an email sign-in or password-reset link securely	Removed once the link is used; if the link is never used, it expires on its own (roughly 400 days)
sgos-role (cookie)	Cached account-role lookup	5 minutes
sgos-remember-me (cookie)	Remembers your "Remember this device" choice	1 year
theme (localStorage)	Light or dark theme	Until cleared
sgos_preview_viewport_mode (localStorage)	Your last editor preview viewport (desktop/mobile)	Until cleared
sgos_inline_edit_tooltip_dismissed (localStorage)	Remembers you have seen the tip about editing a site directly	Until cleared
sgos-signup-intent (localStorage)	Which button opened sign-up, so your new account lands where you were going	Removed when it is read, and ignored after 1 hour
sgos-pending-token (localStorage)	The claim code for a website you started before signing up	Removed when the account is created. Until cleared if you never sign up
sgos-site-cookie-notice (localStorage)	Remembers that a published site's cookie notice was dismissed (see "On published sites" below)	Until cleared
sgos-pending-listing (sessionStorage)	The business listing you pasted, so it survives signing up	Until you close the tab
sgos-pending-listing-enhancement (sessionStorage)	The extra paragraph written beside that listing	Until you close the tab
sgos-enhanced-brief-… (sessionStorage)	The improved listing as you saw it, shown again when the build starts	Until you close the tab
sgos-arrival-conversation (sessionStorage)	The questions and answers from a build, carried into the editor	Until you close the tab
sgos-chat-draft-… (sessionStorage)	An editor message you had typed when your sign-in expired, so it is not lost	Removed when you send it. Until you close the tab otherwise
sgos:dunning-banner-dismissed (sessionStorage)	Remembers you dismissed the notice about a failed payment	Until you close the tab
sgos-celebrated:… (sessionStorage)	Remembers that the upgrade celebration has already played	Until you close the tab
sgos:payload-retry (sessionStorage)	Reloads a page once if its code arrived incomplete (see "On published sites" below)	Until you close the tab
sgos:error-retry (sessionStorage)	After you press "Try again" on an error page, reloads the page if it fails the same way again within ten seconds	Removed when it is read, and ignored after ten seconds

Nothing in this list is shared with a third party. The cookies are sent to our own servers with each request — that is how a cookie works, and how sign-in works. What is stored in localStorage or sessionStorage stays in your browser, except two items that exist to be handed back to us: the claim code (sgos-pending-token) is sent to our servers when your new account claims the website you started, and the improved listing (sgos-enhanced-brief-…) is sent when the build starts, and kept with that build. When a page reloads itself after its code arrived incomplete, it also leaves a timestamp in the tab's window.name so it reloads only once; that stays in the tab.

The example website on our home page shows a Google map, which loads as you scroll near it: your browser fetches it from Google, which may set its own cookies (see "On published sites" below for how to block them).

Cloudflare Turnstile provides invisible bot protection on our forms (sign-up, sign-in, password recovery, magic-link sign-in, the site-generation input, and account deletion) and may set its own cookies to function. It is required for security.

If we introduce a non-essential cookie on sitegenos.com, we will update this policy to describe what is set and why.

On published sites

Sites hosted by SitegenOS show a one-time notice ("This site uses cookies for maps and embedded content"):

• Google Maps embeds load automatically on pages that display a location and may set third-party cookies.
• Cloudflare Turnstile protects the site's contact forms.
• Photographs and video on a published site are served from Pexels. Two cookies are set on your device by Cloudflare, which delivers them — __cf_bm and _cfuvid, both on pexels.com — to separate people from automated traffic and to apply rate limits. They come from Pexels' network, not from the site and not from us.
• sgos-site-cookie-notice (localStorage) remembers that the notice was dismissed.
• sgos:payload-retry (sessionStorage) is set only if a page's code arrives incomplete, so the page can reload itself once rather than leave a visitor looking at a blank screen. It lasts until the tab is closed and holds nothing but a timestamp, which the page also leaves in the tab's window.name so it reloads only once.

Published sites set no analytics, advertising, or tracking cookies, and SitegenOS does not track visitors across sites or build profiles. Error monitoring (Sentry) runs in the visitor's browser as well as on our servers: it reports errors, counts page loads and times a sample of one in ten, without cookies. Email addresses and phone numbers are removed before a report or a timing is sent. It does not record your screen.

The notice on a published site tells you what the site uses. It does not ask for your permission, and dismissing it changes nothing about what loads. The map is treated as part of the page: it loads with the page on first view, before you have read the notice, and there is no click-to-load step in front of it. We would rather say that plainly than describe a consent step that is not there.

If you do not want those cookies, you can block third-party cookies in your browser, and Google offers its own privacy controls for the services it provides. Blocking them may stop an embedded map from displaying. The rest of the site keeps working. Browser settings let you block, delete, or inspect all cookies — blocking the essential ones above will prevent sign-in from working.

Contact

hello@sitegenos.com · ApeTec Ltd, registered in England and Wales, company number 17065917. Registered office: 124–128 City Road, London EC1V 2NX.