Legal
Cookie Policy
Last updated: 2026-11-09
Cookies and similar browser storage are small pieces of data saved on your device. Under the Swedish Electronic Communications Act we may use the ones strictly necessary for the Service without asking; for everything else we ask first. How we handle the data itself is in the Privacy Policy.
1) Strictly necessary (always on)
These make sign-in, security, payment and your cookie choice work. They cannot be switched off here.
| Name | Set by | Purpose | Lifetime |
|---|---|---|---|
| __session | Clerk (sign-in) | Keeps you signed in; short-lived token | About 1 minute, refreshed while you use Sjo |
| __client_uat | Clerk (sign-in) | Tells the site whether you are signed in | Up to 1 year |
| __client, __refresh_* | Clerk (sign-in) | Long-lived sign-in session and refresh | Up to your session lifetime |
| sjo_cookie_consent_v1 | Sjo | Remembers your cookie choice | 12 months |
| sjo_pending_invite | Sjo | Carries an invite code (and its campaign tags) through sign-up | 1 hour |
| Stripe cookies (e.g. __stripe_mid, __stripe_sid) | Stripe (checkout) | Fraud prevention during payment | 30 minutes to 1 year |
2) Browser storage for features you use
Some features save data in your browser's local storage instead of a cookie, so they work without an account. This data is not sent to us unless you sign in and sync.
| Name | Set by | Purpose | Lifetime |
|---|---|---|---|
| sjo-tools:*, sjo:runway-handoff | Sjo | Saves your free-tool inputs in your browser | Until you clear them |
| sjo_legal_notice_dismissed_v1 | Sjo | Remembers dismissed update banners | Until you clear them |
| sjo_chat_* | Sjo | Chat session and display settings | Until you clear them |
3) Analytics (off until you accept)
With your consent we load Vercel Web Analytics and Speed Insights to count page views and measure performance. They do not set cookies and do not track you across other sites, but they do process page and device data, so we still only load them after you opt in.
Separately, our own server keeps anonymous counts of page views and key steps (for example "checkout started"). Each count holds only the page path, the referring website's name, and whether you were signed in. It sets no cookie, stores nothing in your browser, and holds no ID or IP address, so it cannot be linked to you. Counts are deleted after 13 months.
4) Marketing and third-party (off until you accept)
We do not currently use advertising or social-media pixels. If we add them, they will be listed here and will stay blocked until you accept this category.