Cookie Policy
SponsorGuard uses strictly-necessary cookies to keep you signed in and protect your account, plus optional Google Analytics cookies on public marketing pages only, after you opt in. Analytics does not run in the signed-in application, authentication pages, worker portal, or platform administration. We use no advertising or profiling cookies.
Last updated: 3 October 2026 · Version: 2026-10-03
Two kinds of cookies
Strictly-necessary cookies are essential — they let you sign in, keep your session secure, and remember your active workspace. Under PECR these do not require prior consent. Analytics cookies (Google Analytics) are optional: they load only if you choose “Accept all” on the banner. Choose “Necessary only” and no new analytics cookie is set — you can use SponsorGuard fully either way.
Cookies we set
| Cookie | Category | Purpose | Duration | httpOnly |
|---|---|---|---|---|
| sg_session | Strictly necessary | Authenticates your signed-in session so you stay logged in securely. | Until the server-issued login session expires (configured session lifetime) | Yes (httpOnly) |
| sg_csrf | Strictly necessary | Protects against cross-site request forgery (CSRF) on form and API actions. | Until the server-issued login session expires (configured session lifetime) | No (read by the app to send a matching header) |
| sg_worker_session | Strictly necessary | Authenticates a sponsored worker who signs in to the worker self-service portal. | Browser session (no persistent expiry); the worker token may expire sooner | Yes (httpOnly) |
| sg_active_tenant | Strictly necessary | Remembers which workspace (tenant) you have selected as active while signed in. | Session (cleared on browser close) | Yes (httpOnly) |
| _ga | Analytics (optional — only with consent) | Google Analytics: distinguishes visitors to measure how the public marketing site is used. Set only if you choose ‘Accept all’. | Provider-managed expiry; deployment analytics cookie settings remain unverified | No (third-party: Google) |
| _ga_GWRRYLL9G8 | Analytics (optional — only with consent) | Google Analytics 4: persists session state for this property. Set only if you choose ‘Accept all’. | Provider-managed expiry; deployment analytics cookie settings remain unverified | No (third-party: Google) |
Analytics (Google Analytics) — opt-in
With your consent we use Google Analytics 4 to understand how the public marketing site is used so we can improve it. The Google Analytics script and its cookies (_ga, _ga_*) load only after you choose “Accept all” — nothing is sent to Google before then. We use no advertising, profiling, or data-selling cookies. To withdraw consent, clear this site's data in your browser; then reload the page. The banner will reappear for a fresh choice. Analytics is not loaded in the signed-in application, authentication pages, worker portal, or platform administration, even if you previously opted in on a public page.
Managing cookies
Blocking the strictly-necessary cookies in your browser can prevent you from signing in or using the service securely. Optional analytics cookies are not needed to use SponsorGuard. Your consent choice is stored as sg_cookie_consent in localStorage (not as a cookie) so the banner does not reappear on every visit.
Questions about this policy, or about any cookie you have seen that is not listed here, go to privacy@sponsorguard.com. The cookies we set are also covered by our Privacy Policy.