This document is a working draft prepared for review by qualified Israeli and US counsel. It has not been approved and must not be treated as final. Items marked "For counsel" are open decisions.
Cookie Policy
The cookies and similar browser storage StockLine uses, what each is for, and how to change your choice.
- Effective:
- (proposed)
- Last updated:
- Version:
- 2026-10-18-draft.1
1. What these technologies are
Cookies are small text files; "similar technologies" include browser local storage and session storage. We use them to keep the Service working and, only with your permission, for optional purposes.
2. Categories
- Strictly necessary — sign-in session, your cookie choice, the language you picked, your order cart, and the signed-in seller's dashboard theme and time zone. The Service cannot work without these, so they are always on. They are set only as part of a feature you use (for example the language cookie is set when you pick a language).
- Analytics — anonymous page-speed measurement and a random per-browser ID that lets a seller see how many unique visitors opened a catalog. Off until you allow it. Without consent, a catalog view is still counted as an anonymous page view with no identifier.
- Functional — convenience memory such as your preferred catalog layout/density and recently opened catalogs. Off until you allow it; the Service works without it.
- Marketing — advertising or cross-site tracking. StockLine uses none today. The switch exists so that the choice is yours if that ever changes.
3. What we set
See the table below (generated from the same list the consent system uses).
4. Your choices
On your first visit a banner offers Accept All, Reject Optional and Customize. Nothing optional is switched on beforehand, and closing the banner or the settings window without choosing is not consent. You can change or withdraw your choice at any time using "Cookie Settings" in the footer; turning a category off also deletes the related data stored in your browser. Your choice is remembered for 180 days or until the cookie policy changes.
We honour the Global Privacy Control signal (a browser setting or extension) as a request to reject optional categories. You can also block cookies in your browser settings, but parts of the Service (like signing in) will then not work.
If you are signed in, we keep a record of your choices (what you chose and when) so we can show we respected them.
5. Regional rules
We apply the same opt-in approach to every visitor rather than varying it by country.
For counsel: Israel has no stand-alone cookie statute, but Amendment 13 and the Protection of Privacy Law require informed consent for personal-data collection; EU/UK ePrivacy requires prior consent for non-essential cookies; US state laws are mostly opt-out and focus on sale/sharing and targeted advertising (none done here) plus the GPC signal (honoured). Confirm that a single global opt-in model is acceptable and that classifying the language and dashboard-theme items as strictly necessary is defensible.
6. Questions
Contact [to be confirmed before publication] (privacy email).
Cookies and similar storage used by StockLine
| Name | Type | Category | Set by | Purpose | Duration |
|---|---|---|---|---|---|
| sb-…-auth-token | cookie | Strictly necessary | Supabase | Keeps a seller or buyer-account holder signed in. | Session / refresh lifetime |
| sl-consent | cookie | Strictly necessary | StockLine | Remembers your cookie choices. | 180 days |
| sl-lang | cookie | Strictly necessary | StockLine | Remembers the language you chose so pages render in it (set only when you pick a language). | 1 year |
| sl-app-lang | cookie | Strictly necessary | StockLine | Signed-in sellers: remembers the language of your dashboard (separate from the language buyers see on your catalogs). | 1 year |
| sl-tz | cookie | Strictly necessary | StockLine | Signed-in sellers only: lets the server show dashboard statistics in the seller's own time zone. | 1 year |
| sl-invoice-lang | cookie | Strictly necessary | StockLine | Remembers the invoice language a signed-in seller picked (set only when they use the toggle). | 1 year |
| stockline-cart (cart) | localStorage | Strictly necessary | StockLine | Holds the items in your order while you browse a catalog. | Until you clear it or submit |
| stockline-order-…, sl:return-to, sl-view:… | sessionStorage | Strictly necessary | StockLine | Order-flow state and back-navigation within one tab. | Tab session |
| sl-app-theme | localStorage | Strictly necessary | StockLine | Remembers the dashboard colour theme a signed-in seller selected. | Until cleared |
| sl:recent-catalogs | localStorage | Functional | StockLine | Shows your most recently opened catalogs first (convenience). | Until cleared |
| stockline-buyer-view | localStorage | Functional | StockLine | Remembers your preferred grid / quick-order layout and density. | Until cleared |
| sl-vid | localStorage | Analytics | StockLine | Random per-browser ID so sellers can see unique-visitor counts (only a hash is stored on our servers). | Until cleared |
| Vercel Speed Insights | third-party | Analytics | Vercel | Anonymous page-speed measurements (Web Vitals). Not loaded unless you allow Analytics. | No cookie set by StockLine |