Cookies are small files a website stores in your browser. Local storage and session storage are similar browser features: local storage keeps data until it is cleared, and session storage until you close the tab. This page lists every one of them that saascity.io sets, or lets another company set, with what it does and how long it is kept. How we handle the data they relate to is in our Privacy Policy.
You can at any time; the banner reappears on the next page load.
1. What Needs Your Consent
Strictly necessary items keep you signed in, protect the site, remember the choices you make and the step you are on. The law does not require consent for these, and they cannot be switched off on the site. You can block them in your browser, but signing in and checkout will then not work.
Analytics (Google Analytics) needs your consent if you are in the European Economic Area, the UK or Switzerland. If your browser uses a European time zone or sends Global Privacy Control, we do not load Google Analytics at all until you say yes. Elsewhere it is on by default, and "Essential Only" turns it off.
Session Replay (Sentry) records some visits so we can fix bugs, with all text and images masked. It runs only after you click "Accept All" or switch analytics on, wherever you are.
Preferences: the banner offers this category so the choice exists, but we currently set nothing in it.
We use no advertising cookies and do no cross-site tracking.
2. Cookies
2.1 Strictly Necessary
sb-supa-auth-token (may be split into .0, .1, ...)
Set by
SaaSCity (first party)
Purpose
Keeps you signed in.
Kept for
Up to 400 days, or until you sign out.
sb-supa-auth-token-code-verifier
Set by
SaaSCity (first party)
Purpose
Completes a sign-in with Google, or a password reset, securely.
Kept for
Until that sign-in or reset is completed.
__cf_bm, _cfuvid, cf_clearance
Set by
Cloudflare, our network and security provider, on saascity.io
Purpose
Tell people from bots, limit abusive traffic, and remember that you passed a security check. Set only when those protections are active for your visit.
Kept for
__cf_bm: 30 minutes. _cfuvid: until you close the browser. cf_clearance: for as long as the security check stays valid, 30 minutes by default.
2.2 Analytics (only with consent where consent is required)
_ga
Set by
Google Analytics (Google Ireland Limited / Google LLC)
Purpose
A random identifier that tells one visitor from another in our analytics reports.
Kept for
2 years.
_ga_8NHK646CXN
Set by
Google Analytics (Google Ireland Limited / Google LLC)
Purpose
Keeps track of the current analytics session.
Kept for
2 years.
3. Local and Session Storage
3.1 Strictly Necessary: Your Choices and What You Are Doing
cookie_consent (local storage)
Set by
SaaSCity
Purpose
Your cookie choice and when you made it.
Kept for
Until you change it. We ask again when what we ask about changes.
saascity:wizardAfterAuth (local storage)
Set by
SaaSCity
Purpose
Reopens the submission form after you sign in.
Kept for
Removed once used.
placingProjectId (local storage)
Set by
SaaSCity
Purpose
Remembers which project you are placing on the city map.
Kept for
Removed once the project is placed.
saascity_guest_welcome_seen_v1 (local storage)
Set by
SaaSCity
Purpose
Remembers that you have seen the welcome message, so it is not shown again.
Kept for
Until you clear this site's data.
directory-submission-helper-v1 (local storage)
Set by
SaaSCity
Purpose
Your progress in the directory submission checklist.
Kept for
Until you clear this site's data.
sc_blog_offer_modal_seen (local storage)
Set by
SaaSCity
Purpose
Remembers that you have seen the blog offer pop-up, so it does not appear again.
Kept for
Until you clear this site's data.
sc_reader_offer (local storage)
Set by
SaaSCity
Purpose
A reader discount you were offered, with its expiry time.
Kept for
Until the offer expires, 24 hours after it was made.
Resumes a checkout you started, after you sign in.
Kept for
Until you close the tab.
3.2 Our Own Measurement
We set these whatever your cookie choice, because they are limited to our own statistics. They are not cookies, they are gone when you close the tab, they are never linked to your account, and they are never shared with anyone. Your IP address is stored only as a salted, one-way hash. Section 2.2 of the Privacy Policy describes this.
sc_session_id, sc_attribution (session storage)
Set by
SaaSCity
Purpose
A random identifier for this visit, and how you arrived (the referring site, a campaign tag in the link, the first page you landed on), for our own aggregate statistics.
Kept for
Until you close the tab.
3.3 Session Replay (only with consent)
sentryReplaySession (session storage)
Set by
Sentry (Functional Software, Inc.), stored in the EU
Purpose
Identifies the recording of the current visit. Only set after you accept analytics.
Kept for
Until you close the tab.
4. Content From Other Companies
YouTube videos on launch pages and the boilerplate page load from youtube-nocookie.com. Google sets no cookies until you play a video; playing it lets Google store data under its own policy.
Product icons on some listings load from DuckDuckGo's icon service (icons.duckduckgo.com), which receives your IP address as any image request does. DuckDuckGo sets no cookies.
Cloudflare Turnstile, the security check on sign-up, sign-in and some forms, runs in a frame from challenges.cloudflare.com to tell people from bots.
Payments happen on Stripe Checkout (checkout.stripe.com), on Stripe's own site and under Stripe's cookie policy. We load no Stripe code on saascity.io.
Images and fonts: images are served from our storage on Cloudflare R2; fonts are served from saascity.io itself.
5. Managing Your Choice
Use the Cookie Settings link in the footer of every page, or here.
Your browser can delete or block cookies and site data for saascity.io at any time.
If your browser sends Global Privacy Control, we treat it as a "no" to analytics until you say otherwise in the banner.
We update this page whenever what we set changes, and ask for your consent again when a change affects what you agreed to. Questions: [email protected].