Sorilo Cookie Policy
Last updated: 1 September 2026
This policy explains how Sorilo uses cookies, browser storage and similar technologies on soriloapp.com.
Sorilo is a trading name of Fergus Gregory Hughes. Contact us at support@soriloapp.com.
1. What these technologies are
Cookies are small text files stored by a website in your browser. Similar technologies include local storage and session storage. They can keep you signed in, remember preferences, protect forms and enable secure checkout.
2. How Sorilo uses them
Strictly necessary technologies
These are required to provide a feature you request or to keep the Service secure. They may be used to:
- authenticate you and maintain your signed-in session;
- prevent fraud, abuse and unauthorised access;
- route traffic and maintain website security;
- preserve the state of forms or checkout; and
- remember privacy choices.
Consent is not normally required for strictly necessary technologies, but we still explain their use.
Preferences
Sorilo uses browser storage to remember choices such as light or dark theme and whether the sidebar is collapsed. These settings are stored in response to your use of the interface and are not used to identify you for advertising or analytics.
Payments
When you open Paddle Checkout or the Paddle customer portal, Paddle may use cookies and similar technologies necessary to process payments, prevent fraud and maintain checkout security. Paddle acts as Merchant of Record and provides more information in its Privacy Notice.
Analytics and advertising
Sorilo does not use Google Analytics, advertising pixels, session-replay tools or client-side analytics identifiers.
Lovable Project Analytics is enabled, but it operates from server-side website request logs. It does not set cookies or browser-storage identifiers and does not fingerprint devices. It records page requests and derives approximate country, device type and referral source from information automatically sent with a web request, such as IP address, User-Agent and Referer headers. See our Privacy Policy for the data-protection basis for this processing.
If Sorilo later adds non-essential analytics, session replay or advertising technologies, we will update this policy and obtain consent before setting or accessing them where required.
3. Current cookie and browser-storage inventory
When you visit Sorilo
| Name | Type/provider | Purpose | Expiry |
|---|---|---|---|
__cf_bm | HTTP-only secure cookie; Cloudflare on .soriloapp.com | Bot management and website security | Approximately 30 minutes |
__dpl | Secure cookie; Sorilo hosting/CDN | Pins the deployment version so page assets match the published build | Approximately one year |
fos_splash_shown | Sorilo session storage | Shows the splash animation only once in the current tab | When the tab closes |
Additional storage when you sign in
| Name | Type/provider | Purpose | Expiry |
|---|---|---|---|
sb-<project>-auth-token | Local storage and session cookie; Supabase/Lovable Cloud | Maintains and refreshes the authenticated session | Session cookie; local storage until logout, expiry or clearing site data |
tsr-scroll-restoration-v1_3 | Session storage; TanStack Router | Restores scroll position during navigation | When the tab closes |
ff-theme | Local storage; Sorilo | Remembers the light/dark theme selected by the user | Until replaced or cleared |
sidebar_state | Cookie; Sorilo | Remembers whether the application sidebar is collapsed | Seven days |
sorilo_onboarding_skipped | Session storage; Sorilo | Remembers that onboarding was skipped in the current tab | When the tab closes |
sorilo:sw-recovered | Session storage; Sorilo | Prevents a repeated reload after a service-worker update | When the tab closes |
| Service-worker cache | Browser Cache API; Sorilo | Stores application assets for performance and offline/PWA operation; it is not intended to contain personal records | Until the application updates or site data is cleared |
Storage used only when you initiate Paddle checkout or open its portal
Paddle Checkout is lazy-loaded only after you choose to start a payment or billing-management flow.
| Name/category | Type/provider | Purpose | Expiry |
|---|---|---|---|
__cf_bm | Cookie on .paddle.com; Cloudflare acting for Paddle | Checkout bot protection and security | Approximately 30 minutes |
m | Cookie on m.stripe.com; Stripe acting as a Paddle payment processor | Payment fraud detection | Approximately two years |
| Paddle checkout storage | Third-party storage on Paddle domains | Checkout session state, payment security and transaction processing | Controlled by Paddle and described in its privacy information |
Paddle’s checkout may contact Paddle, Stripe, Google Fonts, Localize, Sentry and country-flag delivery hosts as part of secure and localised payment processing. These resources are loaded by Paddle’s checkout rather than as Sorilo marketing or analytics tools. Paddle provides more information in its Privacy Notice.
4. Your choices
You can delete cookies and site data through your browser settings. Blocking strictly necessary technologies may prevent you from signing in, saving preferences or completing checkout.
Sorilo does not currently set analytics or advertising cookies, so it does not display a general analytics-consent banner. If this changes, you will be able to accept or reject non-essential technologies before they are set and change your choice later.
5. Changes and contact
We may update this policy when our technology or legal obligations change. Questions can be sent to support@soriloapp.com.