Legal
Cookie Statement
This Cookie Statement explains how Sponsorboard uses cookies and similar technologies (such as your browser’s local storage) on getsponsorboard.com.
1. What are cookies?
Cookies are small text files placed on your device when you visit a website. They let a site remember your preferences or track how you interact with it across sessions.
Sponsorboard keeps its cookie use minimal. We do not run advertising networks, retargeting pixels, or third-party social media tracking scripts.
2. What we use
2.1 Strictly necessary
These keep the site secure and remember essential choices you make. They cannot be switched off without breaking core functionality.
| Item | Type | Provider | Purpose | Expiry |
|---|---|---|---|---|
__cf_bm | Cookie | Cloudflare | Bot management at the network edge | 30 minutes |
cf_clearance | Cookie | Cloudflare | Stores challenge completion so Cloudflare does not re-challenge within a session | 30 min – 1 year |
sb-cookie-consent | Local storage | Sponsorboard | Remembers your cookie preferences (including the consent version) so the banner doesn’t re-prompt on every page | 365 days |
Legal basis: strictly necessary / legitimate interest. No consent required.
The sb-cookie-consent record contains three fields: the consent version (1), the timestamp you made the choice, and whether analytics is allowed. No identifier, no profile, no cross-site signal — it never leaves your browser. We treat localStorage entries the same as cookies under Article 5(3) ePrivacy Directive and disclose them here even where consent is not legally required.
2.2 Security — Cloudflare Turnstile
All of our forms — the creator and brand waitlist, the brand contact form, and the newsletter signup — use Cloudflare Turnstile to tell human visitors from bots before form submission.
Turnstile is not a tracking technology. It does not set persistent cookies, build a cross-site profile, or fingerprint your device. It runs a lightweight challenge using browser signals — signals are sent to Cloudflare for the purpose of the challenge only, and not used for advertising or analytics.
Full details: Cloudflare Turnstile privacy policy
Legal basis: Legitimate interest (fraud and abuse prevention). No consent required.
2.3 Analytics — Google Analytics 4
When you accept analytics in the cookie banner, Google Analytics 4 (Google Ireland Limited) runs in anonymised mode. GA4 is managed through Google Tag Manager. Until you opt in, neither the Tag Manager script nor GA4 is loaded at all: your browser makes no request to Google and no Google cookie is set. If you have accepted, the Tag Manager script loads on each page view and fires GA4. GA4 helps us see which pages get used, on what device, and from where — in aggregate. No advertising features, no profile-building, no link to other Google products tied to your account.
| Cookie | Provider | Purpose | Expiry |
|---|---|---|---|
_ga | Google Ireland Limited | Distinguishes one visitor from another (a random ID, no PII) | Up to 24 months |
_ga_<container-id> | Google Ireland Limited | Per-property session state used by the GA4 measurement protocol | Up to 24 months |
These cookies are only set after you opt in. If you reject analytics, or later withdraw consent, the tag is not loaded and we delete any _ga, _ga_* and _gid cookies on getsponsorboard.com.
Configuration: IP anonymisation on; Google Signals off; ad personalisation off. We use Google Consent Mode v2 in its “basic” form: the tag is only loaded after you opt in, and when it loads, all advertising storage is set to “denied” and only analytics_storage is set to “granted”.
Data retention on the Google side: 14 months on GA4 event records.
International transfer: GA4 involves processing in the United States. Transfers rely on Google’s certification under the EU-US Data Privacy Framework, with Standard Contractual Clauses (Module 2) as fallback.
Legal basis: consent — Art. 6(1)(a) GDPR + Article 5(3) ePrivacy Directive. Withdraw at any time via the “Cookie settings” button in the footer.
Full details: Google Privacy Policy · Safeguarding your data — Google Analytics Help
2.4 Newsletter
Signing up for the newsletter (“The dispatch.”) in the footer does not set any cookie or local storage item. Your email address is sent to our servers (protected by Turnstile, see 2.2), stored in Sanity, and used by Resend to send you the newsletter. Newsletter emails do not contain tracking pixels or tracked links. See Sections 2–4 of our Privacy Policy for what we store, why, and how to unsubscribe.
3. What we deliberately do not use
We do not use:
- Advertising or retargeting cookies (Google Ads, Meta Pixel, TikTok Pixel, etc.)
- Social media tracking scripts
- Cross-site tracking or user profiling of any kind
- Browser fingerprinting scripts
4. How to manage cookies
Browser settings — most browsers let you view, block, or delete cookies. Step-by-step guides for major browsers: aboutcookies.org
Note: blocking strictly necessary cookies or local storage may break site functionality (for example form submission, or the banner remembering your choice). Blocking Cloudflare’s cookies may trigger repeated security challenges on protected pages.
Turnstile — because Turnstile does not use persistent cookies or cross-site tracking, there is nothing to opt out of beyond the challenge itself.
Analytics — you can decline or withdraw analytics consent at any time via the “Cookie settings” button in the footer, or by installing the Google Analytics Opt-out Browser Add-on.
5. Changes to this statement
We update this statement before activating new cookies or technologies. The “last updated” date at the top reflects the most recent change.
6. Contact
Questions about our cookie use: [email protected]