1. What are cookies?
Cookies are small text files stored on your device. We also use similar technologies such as local storage for consent choices and visitor identifiers. Under UK PECR and UK GDPR we must tell you what we use and, for non-essential cookies, obtain your consent before setting them.
2. How we ask for consent
On first visit you will see a cookie banner with three equal choices: Accept all, Reject optional, and Manage. Strictly necessary cookies may run without consent. Preferences and analytics cookies are set only after you opt in. You can change your mind anytime via Cookie settings or the footer link on any page.
Your choice is stored in local storage (st_cookie_consent) and summarised in a first-party cookie (st_consent) for up to 365 days.
3. Cookies we use
| Name | Category | Purpose | Duration |
|---|---|---|---|
ot_session |
Strictly necessary | HttpOnly session JWT — keeps you signed in to the dashboard | Up to 30 days |
st_consent |
Strictly necessary | Records that you made a cookie choice (necessary / prefs / analytics / all) | 365 days |
st_cookie_consent (local storage) |
Strictly necessary | Stores detailed preference JSON so we do not re-prompt every page | Until cleared |
st_prefs |
Preferences | Marks that optional preference cookies are allowed | 365 days (only if consented) |
st_analytics |
Analytics | Marks that first-party analytics is allowed | 365 days (only if consented) |
st_vid |
Analytics | Anonymous visitor id for consented first-party page-view stats | 365 days (only if consented) |
Merchant widget storage (on your customers’ sites)
When a merchant installs the SocialTrust widget, the widget may use local storage keys (for example visitor id and last-shown timestamps) on that merchant’s domain so notifications work. SocialTrust does not show a consent banner on third-party stores — merchants must handle PECR/ePrivacy notices for their visitors.
4. Categories explained
- Strictly necessary — required to provide a service you request (sign-in, security, remembering cookie choices). No consent required.
- Preferences — optional comforts such as remembering dismissed tips. Off until you accept.
- Analytics — first-party page views via
/api/consent/beaconto understand which marketing pages are useful. Not used for advertising or sold to data brokers. Off until you accept.
5. Managing and withdrawing consent
You can:
- Open Cookie settings and save new choices;
- Use Reject optional to clear preference and analytics cookies;
- Clear cookies and site data in your browser settings.
6. More information
Full personal-data practices: Privacy Policy
Service terms: Terms of Service
Questions: privacy@socialtrust.io
UK guidance: ICO cookies guide