Cookie Policy

A cookie is a small file a website stores in your browser so it can recognise you on your next request — for example, to keep you signed in between pages.

On a secure connection some of the cookies below carry a standard security prefix on their name, which tells your browser to send them only over HTTPS. They are named here without that prefix.

These are needed for the site to work. They are set by our authentication library:

• authjs.session-token — keeps you signed in. Set when you sign in, and removed when you sign out.
• authjs.csrf-token — protects sign-in and account forms against cross-site request forgery.
• authjs.callback-url — remembers the page to return you to after signing in.

Without these you cannot sign in, so there is no option to turn them off while using an account. Browsing without signing in does not set them.

These remember a choice you made, so the site does not have to ask again:

• NEXT_LOCALE — the language you are viewing the site in.

With your permission, first-party analytics records page paths, link and control interactions, approximate country, device class, referring site and active browsing time. It uses sm_analytics_consent (90 days), sm_analytics_visitor (a random identifier, 90 days) and sm_analytics_session (30 minutes of inactivity). Your choice is also stored in local storage as sortermarket.analytics-consent until you change it or clear browser data. We do not record message text, form contents, raw IP addresses or screen recordings. Visit records expire after 90 days and are removed on the next analytics request. A daily keyed hash of the connection address is kept briefly for rate limiting and removed after one day on the next analytics request.

With your permission, Meta's advertising pixel loads on our pages. It sets _fbp (a random browser identifier, 90 days) and, when you arrive from one of our ads, _fbc (the ad click identifier, 90 days). It tells Meta which pages you visit on sortermarket and when you complete sign-up, so we can measure which of our ads work. When you complete sign-up, our server also sends Meta that event with a hashed copy of your email address, your IP address, your browser's user agent, the _fbp and _fbc identifiers, the page you signed up on and the type of work you chose. Meta uses these to match the event to your Meta account if you have one. A cookie, sm_meta_signup (5 minutes), passes that event's reference to the next page, so Meta counts your sign-up once; the page deletes it as soon as it reads it. Your choice is stored in sm_marketing_consent (90 days) and in local storage as sortermarket.marketing-consent. Meta also uses this data under its own privacy policy. We do not show third-party advertisements on sortermarket.

Our hosting and network security providers may set a cookie of their own to keep the service secure — for example, to confirm that a request is allowed through to the site. These are security cookies rather than tracking cookies, and they are not used for advertising.

Use Cookie preferences in the site footer to allow or stop optional analytics and optional marketing. Declining analytics stops future collection and removes the visitor and visit cookies. Declining marketing stops the pixel loading, stops sign-up events being sent to Meta, and removes the _fbp and _fbc cookies. You can also delete cookies and local storage in your browser settings.

Blocking the strictly necessary cookies above will stop you signing in. Blocking the preference cookie is harmless — the site will use your browser's language instead.

If we add a cookie, we will add it to the list above and change the effective date at the top of this page.

Questions about cookies can be sent to customersupport@sortermarket.com.