Cookies Policy
This Cookies Policy explains how SUOOG™ ("we") uses cookies and similar technologies when you visit suoog.ca or use any related services. It works alongside our Privacy Policy and Terms of Service.
- 01Three kinds. Necessary storage keeps you signed in, remembers your cookie choice and protects our forms from bots. Analytics cookies measure how the website is used. Advertising cookies help us measure and show SUOOG’s own ads on other websites.
- 02Off until you choose. Analytics and advertising cookies are used only if you turn them on, and “Reject All” takes one click, as “Accept All” does. Change your mind at any time from “Cookie settings” at the bottom of every page.
- 03Not in the apps. The SUOOG apps use no analytics or advertising cookies at all.
- 04What we do not use. No social-media tracking pixels, and no ads on SUOOG itself. We do not sell your cookie data.
This summary is provided for convenience only. It forms no part of this document and does not modify it; the sections below are the operative text.
Contents
What cookies are
Cookies are small text files placed on your device when you visit a website. They let the site remember your actions and preferences (such as log-in, language, accessibility settings) so you do not have to re-enter them each time. Similar technologies include local storage, session storage, and pixel tags — we use "cookies" throughout this policy to refer to all of them.
The cookies we use
SUOOG uses cookies and browser storage in three categories. Only the first is always on. The other two are used on the website only if you allow them, and never inside the SUOOG apps.
| Category | Purpose | Examples | Retention |
|---|---|---|---|
| Strictly necessary — sign-in | Keep you logged in and secure your session. | Amazon Cognito sign-in tokens, in your browser’s local storage (keys beginning
CognitoIdentityServiceProvider.). |
Until logout, or up to 30 days (refresh token). |
| Strictly necessary — your choice | Remember whether you allowed analytics and advertising cookies, so we do not ask on every page. | suoog_consent (local storage). |
12 months, then we ask again. |
| Functional | Settings that help the site work as intended. They stay in your browser and are not sent to SUOOG or anyone else. | cininUserRefreshAt — when your account details were last refreshed,
so this is not repeated on every page (signed-in users; removed when you log out).suoog_ownerref — recognises your own listings so their page lays out
correctly (signed-in users; removed when you log out).suoog_blocks — the sellers you blocked, remembered for your account
on this device so their listings stay hidden while the page loads (signed-in users;
removed when you log out).suoog_myshop — the address of your own shop page, remembered for
your account on this device so the home page shows its My Shop button at once
(signed-in users who switched their shop on; removed when you log out).suoog_support_until — remembers that you closed the “Help SUOOG
grow” message.suoog_in_app — remembers, for this visit only, that the page is
running inside a SUOOG app, so no optional cookies are offered or used there.suoog.ms.pending, suoog.gp.pending — only inside the
SUOOG apps: keep an in-app purchase that has not been confirmed yet, so it is not
lost. |
suoog_support_until: 3 days. suoog_in_app: until you close
the tab. Pending purchases: until confirmed. The others: until you log out, delete
your account or clear your browser data. |
| Security (anti-bot) | Google reCAPTCHA Enterprise tells humans from bots on our sign-up, log-in, password-reset, contact, and posting forms. Invisible — no puzzle. Loaded only in the main SUOOG app and on the Contact page. | Google reCAPTCHA — the _GRECAPTCHA cookie set on
google.com. |
Up to 6 months (set and managed by Google). |
| Analytics — only if you allow it | Measure how the website is used (pages viewed, sessions, approximate region, device/browser) so we can improve SUOOG. | Google Analytics 4 — _ga (distinguishes visitors) and
_ga_2KK6DFWTCF (keeps session state), set on suoog.ca. Google states that
Google Analytics 4 does not log or store IP addresses. |
2 years each (Google’s default), or until you withdraw consent. |
| Advertising — only if you allow it | Measure whether SUOOG’s own ads on other websites lead people to SUOOG, and show SUOOG ads to people who have visited suoog.ca. See the Privacy Policy. | Google Ads — _gcl_au and other _gcl_ cookies, set on
suoog.ca, and _gcl_ls in local storage. Google may also use its own
advertising cookies on its domains (such as google.com and doubleclick.net) under
Google’s policies. |
90 days (_gcl_au), or until you withdraw consent. _gcl_ls is
managed by Google. |
| Payment and identity verification | Process checkout via Stripe (PCI-DSS compliant) on this website, and run the optional Stripe Identity check on every platform. Purchases made inside the SUOOG apps go through that app store’s own in-app purchase system and set no cookies here.Run the optional Stripe Identity check (PCI-DSS compliant), which works the same way on every platform. Purchases in this app go through the App Store’s own in-app purchase system and set no cookies here.Run the optional Stripe Identity check (PCI-DSS compliant), which works the same way on every platform. Purchases in this app go through the Microsoft Store’s own in-app purchase system and set no cookies here.Run the optional Stripe Identity check (PCI-DSS compliant), which works the same way on every platform. Purchases in this app go through Google Play’s own billing system and set no cookies here. | Stripe’s own cookies on checkout.stripe.com and
verify.stripe.com. |
Managed by Stripe. |
Your choices
On your first visit to suoog.ca we show a banner with three buttons: Accept All, Reject All and Choose. Accepting and rejecting each take one click, and nothing optional loads until you choose.
You can change or withdraw your choice at any time from “Cookie settings” at the bottom of every page. When you withdraw, we delete the Google Analytics or Google Ads cookies set on suoog.ca and, if one of those tags was already running, reload the page so that it stops. Cookies Google sets on its own domains are governed by Google; you can remove them in your browser.
Your choice is kept in your browser for 12 months, then we ask again. We also ask again whenever we add a new kind of optional cookie or a new provider. Because the choice lives in your browser, it applies to that browser only, and if you clear your browser data we will ask again.
Advertising is a separate choice. Advertising cookies are used only if you allow Advertising. Allowing Analytics alone does not turn them on, and refusing them changes nothing about how SUOOG works for you. See the Privacy Policy.
Inside the SUOOG apps no banner appears, because the apps use no analytics or advertising cookies at all; any left on suoog.ca from an earlier visit are removed when the app opens a page.
Third-party services
- AWS: Cognito (sign-in), Amplify (hosting) and CloudFront (delivery). Cognito keeps your session in your browser’s local storage; Amplify and CloudFront set no cookies.
- Stripe: sets its own cookies on its checkout and identity-verification pages. In the SUOOG apps, payment is handled by the app store instead of Stripe Checkout, but Stripe Identity is still used for the optional verification check.
- Stripe Identity: sets its own cookies on the identity-verification pages used for the optional verified-seller check. Purchases in this app are handled by the App Store and set no cookies here.
- Stripe Identity: sets its own cookies on the identity-verification pages used for the optional verified-seller check. Purchases in this app are handled by the Microsoft Store and set no cookies here.
- Stripe Identity: sets its own cookies on the identity-verification pages used for the optional verified-seller check. Purchases in this app are handled by Google Play and set no cookies here.
- Google Fonts: Open Sans loaded from
fonts.googleapis.comandfonts.gstatic.com. Google states that the Fonts API sets no cookies; as with any web server, it receives your IP address and browser details. - jsDelivr: the main SUOOG app loads Amazon’s sign-in library from
cdn.jsdelivr.net. It sets no cookies. - Google Analytics 4 — only if you allow Analytics: measures page views,
sessions and usage (cookies
_ga/_ga_*). Google states that Google Analytics 4 does not log or store IP addresses. For visitors who allow Analytics but not Advertising, we switch off Google signals and ad personalisation. See Google’s Privacy Policy or install the opt-out add-on. - Google Ads — only if you allow Advertising:
measures and shows SUOOG’s own ads on other websites (cookies
_gcl_au/_gcl_*). See the Privacy Policy. - Google reCAPTCHA Enterprise: protects our public forms (sign-up, log-in,
password-reset, contact, posting) from bots. Sets the
_GRECAPTCHAcookie and receives device/interaction signals to score each submission; it does not receive your name, email, phone, or address. Loaded only in the main SUOOG app and on the Contact page. Subject to Google’s Privacy Policy and Terms.
What we do not use
- Social-media tracking pixels (Meta Pixel, TikTok Pixel, etc.).
- Ads on SUOOG’s own pages.
- Any advertising platform other than Google Ads. If that changes, we will name the new platform here first and ask for your consent again.
- Selling or sharing your cookie data with data brokers.
Managing cookies in your browser
Use “Cookie settings” at the bottom of every page to change your choices. You can also control cookies through your browser settings at any time. Most browsers let you:
- See which cookies are set and delete them individually.
- Block third-party cookies entirely.
- Block all cookies and site data (this will log you out and prevent posting/buying on SUOOG).
- Receive a notification before any cookie is set.
Do Not Track
Some browsers transmit a "Do Not Track" (DNT) signal. Because no single industry standard exists for DNT, SUOOG does not respond to DNT signals. On SUOOG you do not need them: analytics and advertising cookies are off unless you turn them on. You can also limit how Google personalises ads in Google’s My Ad Center.
Changes to this policy
We may update this Cookies Policy from time to time to reflect changes to the technologies we use or applicable law. Any material change will be posted on this page with a revised "Last Updated" date, with the advance notice described in our Privacy Policy. If a change adds a new kind of optional cookie or a new provider, we will ask for your consent again before it is used.
Contact
Questions about cookies? Email our Privacy Officer at contact@suoog.ca.