Cookie Policy
Version 1.1-draft · Effective August 13, 2026
Plain-English summary: this website uses only the cookies it needs to function and a minimal first-party analytics measurement. We use no advertising cookies, no ad pixels, and no cross-site tracking — here or in the App. Because of that, there is no cookie consent banner to click through: nothing optional is set that would require one.
This Cookie Policy explains how SneakBox uses cookies and similar technologies (local storage, software development kits in the App) on the SneakBox website and iOS app (together, the “Service”). It supplements our Privacy Policy, which describes all of the personal information we collect and why.
1. What cookies are
Cookies are small text files a website stores on your device to remember information between page loads or visits — for example, that you are signed in, or that a form was already submitted. Similar technologies (browser local storage, and SDK-level identifiers inside a mobile app) do the same job by different means. This Policy covers all of them, and we use “cookies” below as shorthand for the group.
2. What we use
We use exactly two categories:
Strictly necessary
Required for the Service to work at all. These cannot be switched off in our systems, because the Service does not function without them.
| Purpose | What it does | Typical lifetime |
|---|---|---|
| Session & sign-in | Keeps you signed in to your account and secures the session against forgery (CSRF protection). | Session, or up to 30 days if you stay signed in |
| Security & fraud prevention | Helps us detect automated abuse, multi-accounting, and circumvention of the state-eligibility rules described in our Eligibility policy. | Up to 12 months |
| Preferences | Remembers basic choices, such as a dismissed notice, so we don’t show it again. | Up to 12 months |
First-party analytics
A minimal, first-party measurement of how the Service is used — page views and referrers on the website, and product events in the App that we log and analyze ourselves. No third-party analytics SDK is integrated in the App, and no analytics vendor receives your data today; if we ever adopt one, the Privacy Policy, Section 2 and this page will name it first. Analytics events are retained for 24 months and then aggregated or deleted.
[Eng/counsel: replace the category tables above with the exact cookie and storage-key names, providers, and lifetimes from the production build before launch — enumerate them, do not approximate.]
3. What we deliberately don’t use
We use no third-party advertising cookies, no ad pixels, no social-media trackers, and no cross-site or cross-app tracking on the website or in the App. We do not use Apple’s App Tracking Transparency framework because we do not track you across other companies’ apps or websites — there is nothing to ask permission for. We do not sell or share personal information collected by cookies (see Do Not Sell or Share).
4. Your controls
- Browser settings. Every major browser lets you block or delete cookies (usually under Settings → Privacy). Blocking strictly necessary cookies will break sign-in and checkout on the website.
- Do Not Track and Global Privacy Control. Because we do not track you across third-party sites and do not sell or share personal information, there is currently nothing for these signals to opt you out of. If that ever changes, we will honor Global Privacy Control signals as a valid opt-out, as the CPRA requires — see Privacy Policy, Section 8.
- In-app. The App’s first-party usage events can be reviewed and your data exported or deleted through Settings → Privacy, as described in Privacy Policy, Section 5.
5. Changes to this Policy
If we ever add a cookie category — for example, if we begin using advertising cookies, which we do not do today — we will update this Policy first, bump its version and effective date, add any consent mechanism the law requires before the new cookies are set, and announce material changes in the App or by email at least 14 days in advance.
6. Contact
Questions about cookies or tracking: privacy@sneakbox.app.