Skip to content

Cookie Policy

Last updated: January 2, 2026

Cookies are how the web remembers things. This page is the plain-English breakdown of which cookies CaptchaSonic sets, why, and the controls you have over every one of them. No dark patterns, no buried switches.

1. So, what is a cookie here?

A cookie is a small text file your browser stores on our behalf. We also group together related browser-storage tech — localStorage, sessionStorage, and similar identifiers — under the same banner, because from a privacy standpoint they do the same job: keeping a little bit of state between page loads.

2. The three buckets we use

Every cookie we set falls into exactly one of three categories. Only the first is on by default — the other two stay off until you say yes.

  • Essential (always on): These keep you logged in, remember your language and theme, protect against CSRF, and make the dashboard actually work. They carry no advertising value and cannot be switched off, because without them the product breaks.
  • Analytics (off by default): Aggregated, privacy-respecting usage stats — which pages load, where errors happen, how fast the API feels. We use this to fix bugs and prioritize work, never to build an advertising profile of you.
  • Marketing (off by default): Measures whether a campaign or referral actually sent you our way, and lets us show relevant offers. If you never opt in, you will simply never see these — and nothing about you is shared for ad targeting.

3. Your controls, no fine print

You decide, and you can change your mind whenever you want:

  • Use the consent banner to accept, reject, or fine-tune each category. Lost it? at any time to revisit your choices.
  • Your browser settings can also block or delete cookies wholesale. Heads-up: clearing essential cookies will sign you out and reset your preferences.
  • Withdrawing consent is one click and takes effect immediately — no email, no waiting period. We re-ask for consent only after a material change to this policy.

4. Global Privacy Control & opting out of "sale"

CaptchaSonic honors the Global Privacy Control (GPC) signal. If your browser or extension sends GPC, we automatically treat it as an opt-out: analytics and marketing storage stay off, and that choice is persisted — you do not need to touch the banner.

California residents (and anyone who wants the same treatment) can also use our dedicated Do Not Sell or Share My Personal Information page. For the record: we do not sell your personal information for money, and the limited analytics/marketing "sharing" the law describes only ever happens after you opt in.

5. Account data lives elsewhere

Cookies are about your browser session, not your account. To export everything we hold about you or to delete your account outright, head to Settings → Privacy in your dashboard. Those tools are self-serve and need no cookie consent to use.

6. Questions?

Anything cookie- or tracking-related, write to [email protected]. For formal data-protection matters, our DPO is reachable at [email protected].