Cookie policy
Plain-English summary: SitePost sets one cookie to keep you logged in — that's always on and needs no consent. We'd also like to use Google Analytics to see how people use SitePost, and advertising cookies from Meta, Google Ads and LinkedIn to measure which of our ads lead to sign-ups and to show our ads to people likely to be interested, but only if you say yes to each category. Both are off until you accept them, and you can change your mind any time from “Cookie settings” in our footer. Advertising tags never run inside your signed-in dashboard; Google Analytics may record which dashboard pages are opened (page addresses only, never your content).
1. What are cookies?
Cookies are small text files that a website places on your device when you visit. They are widely used to make websites work correctly, remember your preferences, and provide information to site owners about how their site is used.
Cookies can be “session cookies” (deleted when you close your browser) or “persistent cookies” (which remain on your device for a set period or until you delete them). They can also be “first-party” (set by the website you are visiting) or “third-party” (set by a different domain, such as an analytics or advertising provider).
2. How we use cookies
SitePost sets one essential cookiethat keeps you securely logged in. Without it you'd be signed out on every page. It's always on, doesn't need your consent under UK cookie law (PECR and UK GDPR), and involves no tracking or profiling — the legal basis is our legitimate interest in keeping the service working.
We'd also like to use optional analytics cookies (Google Analytics) to understand how people use SitePost, and optional advertising cookies (Meta, Google Ads and LinkedIn) to measure our own ads. Neither is essential, so we only set them with your consent — see sections 3A, 3B and 3C.
3A. Analytics cookies (optional)
If you accept analytics, we turn on Google Analytics 4 (GA4) to see how people use SitePost in aggregate — which pages get visited, roughly how many people are using it, and where they came from, including any campaign links they clicked. Until you say yes, it stays off: we use Google's Consent Mode, which keeps every signal denied by default.
Choosing analytics only turns on analytics. Google's advertising storage and ad personalisation stay switched off unless you also accept the separate Advertising category (sections 3B and 3C). Inside the signed-in dashboard, Google Analytics records only which pages are opened (their addresses), never your posts, photos or captions.
What GA4 collects once you consent: pages you view, your device and browser type, an approximate location (worked out from your IP address, which Google Analytics 4 doesn't store), and how you arrived at SitePost, including any campaign link. It doesn't collect your name, email, or anything that directly identifies your SitePost account.
Google Analytics is run by Google, who processes this data as our data processor. Some processing happens outside the UK, on Google's servers — when it does, Google uses standard contractual clauses and other approved safeguards to protect it.
How long we keep it: GA4 keeps this data for 14 months, then deletes it automatically. Reports built from aggregated data (not tied to any individual) can be kept for longer.
The legal basis for this cookie is your consent. You don't have to accept it, and SitePost works exactly the same either way.
Changed your mind?Click “Cookie settings” in the footer of any page (or Dashboard → Settings if you're signed in) and choose “Reject”. This turns analytics off immediately. Clearing your cookies works too — it resets your choice and shows the banner again next visit.
| Name | Purpose | Duration | Type |
|---|---|---|---|
_ga, _ga_<container-id> | Set by Google Analytics (GA4) only after you accept analytics. Distinguishes visitors for aggregate usage reporting. | Up to 2 years (Google's default cookie lifetime) | Third-party (Google), persistent, optional/consent-based |
3B. Advertising measurement (optional)
SitePost advertises on Facebook and Instagram. If you accept the “Advertising” category, we load the Meta Pixel(and send matching events from our servers using Meta's Conversions API) so we can tell which of our ads led to a visit or a sign-up. Until you say yes, the Meta Pixel is not loaded at all and your browser makes no request to Meta.
What it collects once you consent: the public pages you view, your device and browser type, your IP address, and the Meta cookies listed below. When you create an account, start a trial or pay your first invoice, we also send Meta that event from our servers; the email address you used is converted to a one-way hash (SHA-256) before it leaves our servers, together with your IP address and browser details, so Meta can match the sign-up to an ad click. We never send your name, password, photos, captions or anything from inside your dashboard.
Where it doesn't run:the Meta Pixel is switched off on the signed-in dashboard. If you browse into it after accepting, the pixel is paused so no dashboard page address is sent. Server-side events are sent only if you accepted advertising when you created your account and haven't withdrawn it since. If you change your choice while signed in, we stop sending them.
Meta Platforms Ireland Limited and Meta Platforms, Inc. receive this data. For this measurement we and Meta act as joint controllers under Meta's business tools terms, and some processing happens outside the UK under Meta's approved transfer safeguards. We use the data only to measure our own advertising. We don't sell it, and we don't use it to build ad audiences from your dashboard activity. The legal basis is your consent; SitePost works exactly the same if you reject it.
Changed your mind?Choose “Cookie settings” in the footer and then “Reject all” (or save your choices with Advertising unticked). The pixel stops sending immediately. Cookies already set expire on their own, or you can clear them in your browser.
| Name | Purpose | Duration | Type |
|---|---|---|---|
_fbp | Set by the Meta Pixel only after you accept advertising measurement. Identifies your browser so Meta can measure ad performance. | Up to 90 days | First-party cookie set by Meta's script, persistent, optional/consent-based |
| Name | Purpose | Duration | Type |
|---|---|---|---|
_fbc | Stored only if you arrive from a Meta ad link and have accepted advertising measurement. Records which ad click brought you here. | Up to 90 days | First-party cookie set by Meta's script, persistent, optional/consent-based |
3C. Advertising: Google Ads and LinkedIn (optional)
The same “Advertising” choice also covers our ads on Google and LinkedIn. If you accept it, we tell Google Analytics that Google's advertising storage, ad user data and ad personalisation are allowed (Google Consent Mode), so Google Ads can measure which of our ads led to a sign-up or purchase and show our ads to people likely to be interested. We also load the LinkedIn Insight Tagand may send matching sign-up and purchase events to LinkedIn from our servers (LinkedIn's Conversions API), with your email address converted to a one-way hash (SHA-256) first. Until you say yes, none of this runs and your browser makes no request to LinkedIn.
Neither runs inside the signed-in dashboard. Google LLC, Google Ireland Limited, LinkedIn Ireland Unlimited Company and LinkedIn Corporation receive this data under their advertising terms, and some processing happens outside the UK under their approved transfer safeguards. We use it only to measure and target our own advertising, and we never sell it. The legal basis is your consent, and SitePost works exactly the same if you reject it. To change your mind, use “Cookie settings” in the footer.
| Name | Purpose | Duration | Type |
|---|---|---|---|
_gcl_au | Set by Google's tag only after you accept advertising. Lets Google Ads link a sign-up or purchase to the ad click that brought you here. | Up to 90 days | First-party cookie set by Google's script, persistent, optional/consent-based |
| Name | Purpose | Duration | Type |
|---|---|---|---|
li_fat_id, lidc, bcookie | Set by the LinkedIn Insight Tag only after you accept advertising. Measure which LinkedIn ads led to a visit or sign-up. | From 1 day (lidc) up to 1 year (bcookie); li_fat_id up to 30 days | LinkedIn cookies, persistent, optional/consent-based |
3. Essential cookies
The one cookie that's always set. See sections 3A, 3B and 3C above for the optional analytics and advertising cookies.
| Name | Purpose | Duration | Type |
|---|---|---|---|
rhino_session | Encrypted session token (iron-session). Identifies your authenticated session so the server can verify who you are on each request. The cookie is flagged HttpOnly (not accessible to JavaScript) and is transmitted only over HTTPS. | 7 days | First-party, persistent, essential |
4. Third-party cookies
The only third-party tracking SitePost can load is Google Analytics (section 3A) and, under the Advertising choice, the Meta Pixel, Google Ads measurement and the LinkedIn Insight Tag (sections 3B and 3C), and only once you've accepted each category. We don't embed other advertising networks or social media tracking widgets on our pages.
However, if you follow external links from SitePost to social media platforms such as Instagram, Facebook, or LinkedIn — for example when previewing a scheduled post on the native platform — those platforms may set their own cookies on your device in accordance with their own privacy and cookie policies. SitePost has no control over, and accepts no responsibility for, cookies set by third-party websites. We encourage you to review the cookie policies of any third-party site you visit.
5. How to manage cookies
You can control and delete cookies through your browser settings. Please note that deleting or blocking the rhino_session cookie will sign you out of SitePost and you will need to log in again.
Browser-specific instructions:
- Google Chrome: support.google.com/chrome/answer/95647
- Mozilla Firefox: support.mozilla.org — Enhanced Tracking Protection
- Apple Safari: support.apple.com — Manage cookies in Safari
- Microsoft Edge: support.microsoft.com — Delete cookies in Microsoft Edge
You can also find general guidance on managing cookies at allaboutcookies.org.
6. Changes to this policy
We may update this Cookie Policy from time to time, for example if we introduce new features that use additional cookies or if the law changes. We will update the “Last updated” date at the top of this page when we do. If we introduce any non-essential cookies in the future we will implement an appropriate consent mechanism before doing so.
We encourage you to review this page periodically. Continued use of SitePost after any changes constitutes acceptance of the updated policy.
7. Contact us
If you have any questions about this Cookie Policy or about how we use cookies, please contact us:
Skyla's Choice Ltd (trading as SitePost)
Email: [email protected]
Registered in England & Wales · Company no. 16059710
If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection matters, at ico.org.uk.