Cookie Policy
How we use cookies and similar storage on getsortio.com.
Last updated: 16 May 2026
How we use cookies
We use three categories of cookies on this website. Strictly necessary cookies are always active. Analytics and marketing cookies load only after you opt in through the Cookie Settings banner. You can change your choices at any time by clicking or visiting Your Privacy Choices. Until you opt in, no third-party analytics or advertising scripts load on this site (we use Google Consent Mode v2 in default-denied state).
Cookieless visit counting
Separately from the cookie categories below, we count page views and download clicks ourselves, on our own servers, for every visit. This runs whether or not you opt in, because it does not use cookies and does not store or read anything on your device, so it falls outside the consent rules that govern cookies.
It records the page you viewed, the site that referred you (domain only, never the full address or any search terms), your country, and your device and operating system type. We do not store your IP address, and we set no identifier that can follow you between days or between sites. To recognise repeat visits within a single day we derive a one-way, randomly salted code from your IP address and browser; the salt changes every day, which means yesterday's records cannot be linked to today's, by us or by anyone else. There is no session recording, no profiling, and none of this data is shared with or sold to anyone.
If you create a Sortio account on the same day you first visited, we use that same-day code once to record which website referred you, so we can tell which channels bring people to Sortio. Only the referring domain is saved to your account (for example "google.com", or "direct" if you came straight to us). The code itself is not saved, your IP address is not saved, and because the code changes daily this never reaches back to earlier visits.
Strictly necessary (always on)
Required to operate the site, authenticate users, prevent fraud, and remember your consent choice. These cookies cannot be disabled.
| Name | Vendor | Purpose | Duration | Policy |
|---|---|---|---|---|
| sortio_consent_v1 | Sortio | Stores your cookie consent choice (analytics, marketing, preferences) plus a small hash. | Persistent (until cleared) | Vendor policy |
| sortio_attribution | Sortio | Captures ad-click context (utm_*, gclid, fbclid) so we can attribute downloads correctly during signup. | 30 days | Vendor policy |
| __stripe_mid / __stripe_sid | Stripe | Fraud prevention on the checkout flow. | Session and up to 1 year | Vendor policy |
Analytics (loads only with your opt-in)
Helps us understand how the site is used and where users get stuck. Disabled by default.
| Name | Vendor | Purpose | Duration | Policy |
|---|---|---|---|---|
| _ga / _ga_* | Google Analytics 4 | Distinguishes unique users and sessions; aggregates traffic metrics. | Up to 2 years | Vendor policy |
| _clck / _clsk and related | Microsoft Clarity | Session-replay tool that records anonymized pointer movement, clicks, and scrolling. Used to identify UX issues. Replays are sampled and exclude form field inputs and content marked as sensitive. | Up to 1 year | Vendor policy |
| _vercel_jwt and related | Vercel Analytics and Speed Insights | Page-view counting and Core Web Vitals measurement. Privacy-friendly, no cross-site tracking. | Session | Vendor policy |
Marketing (loads only with your opt-in)
Lets us measure ad performance and reward affiliates. Disabled by default.
| Name | Vendor | Purpose | Duration | Policy |
|---|---|---|---|---|
| _fbp / fr | Meta Pixel | Attribution for advertising campaigns on Facebook and Instagram; deduplication with server-side Conversions API. | Up to 90 days | Vendor policy |
| rewardful.referral | Rewardful | Affiliate tracking so referrers get credit for signups they drive. | 60 days | Vendor policy |
| _gcl_au | Google Ads (via GA4 link) | Conversion measurement for Google Ads campaigns. Only fires after you grant marketing consent. | 90 days | Vendor policy |
A note on session replay (Microsoft Clarity)
Microsoft Clarity is a session-replay tool. When enabled by your consent, it records mouse movement, clicks, scrolls, and the rendered page so we can review aggregate UX issues. Clarity automatically masks form inputs by default and we configure it to redact content marked as sensitive. We do not use replays to identify individual users; the goal is to find broken pages and confusing flows. You can opt out at any time via the Cookie Settings banner or your browser's privacy controls.
Desktop app
Sortio's desktop application stores local settings on your device and does not set website cookies. Optional diagnostics and telemetry inside the app are off by default for EEA and UK users and require your opt-in in Settings, Privacy.
Managing your choices
Open at any time, or visit Your Privacy Choices for the US state opt-out form. We honor Global Privacy Control (GPC) signals automatically.
For questions, contact us at marcus@getsortio.com.