Cookie Policy

Cookies are small text files stored in your browser. We also use similar technologies such as local storage and third-party scripts that may set or read cookies when they run.

We group them into essential (required for security, authentication, and core features) and analytics / diagnostics (optional, used only with your consent).

The table below lists cookies and similar technologies across our marketing site, application, and public attestation pages. Analytics and diagnostics rows apply only after you choose Accept analytics.

Essential cookies and scripts support security, authentication, language preferences, and core functionality. They run regardless of whether you accept analytics.

We request optional analytics and diagnostics only after you choose Accept analytics on our cookie banner.

We use Google Tag Manager (container GTM-MS6H7S5D) in basic consent mode. GTM is not requested unless you opt in. If you select Essential only before it loads, GTM and other analytics tags remain unloaded. If you withdraw after opting in, SourceTrust stops queued analytics events and removes the injected GTM elements. Code already executed by a third-party tag cannot be unloaded from the current document.

When browser monitoring is configured, we also load the Sentry browser SDK after opt-in so we can diagnose client-side errors and performance issues. Choosing Essential only or withdrawing consent stops the browser SDK. Server-side and Worker error monitoring does not depend on cookies and is not controlled by this banner.

When enabled, analytics help us understand how visitors use our marketing site, application, and public attestation pages (for example, which pages are viewed). Data collected through these tools is handled as described in our privacy policy.

We store your consent choice in your browser (cookie key sourcetrust_cookie_consent_v1 on .sourcetrust.dev, with localStorage as a fallback on each origin) so we do not ask on every page. The same choice can apply across our marketing site and application subdomains when you enable analytics.

On a new page load, Essential only means we do not request analytics tags or the Sentry browser SDK. Accept analytics means we load GTM (when configured), the Sentry browser SDK (when configured), and related tags on eligible routes during subsequent visits until you change your choice.

Use Cookie settings in the page footer at any time to open your cookie preferences. Choose Essential only to withdraw analytics consent, or Accept analytics to opt in. We save a withdrawal immediately, stop SourceTrust-owned analytics events, stop the Sentry browser SDK, and remove the GTM elements from the current page. When browser storage events are available, we also remove them from other open tabs on the same origin. Code already executed by a third-party tag may remain active until you reload or navigate away. On the next page load, GTM and the Sentry browser SDK stay unloaded while Essential only remains saved. Withdrawal does not delete analytics cookies already stored; you can delete them through your browser settings.

Clearing site data for the relevant domain in your browser also resets your saved choice and shows the initial cookie banner again on your next visit.

You can also block or delete cookies through your browser settings. Essential features such as sign-in and abuse prevention may not work correctly if you block all cookies.

For general information about controlling cookies in your browser, see internetcookies.com.

We may update this cookie policy from time to time. We will post the updated policy on this page and update the "Last updated" date.

Questions about cookies: hello@sourcetrust.dev