Cookie policy
Last updated
Shmor uses a small number of cookies. Some are strictly necessary to run the service and are always on. Analytics cookies from Google Analytics are only set if you accept them, and rejecting them is as easy as accepting. This page lists each one and explains how to change your choice.
What are cookies?
Cookies are small files a website stores in your browser. Similar technologies include browser storage such as local storage. The Privacy and Electronic Communications Regulations (PECR) require us to ask for your consent before using them, unless they are strictly necessary to provide a service you asked for. Shmor does not use local storage or similar technologies.
How do I change my choice?
Use Cookie settings at the bottom of any page, or the button below, to reopen the banner and accept or reject analytics cookies. If you reject them after accepting, we stop sending data to Google Analytics and delete its cookies from your browser for this site.
Strictly necessary
These are needed for Shmor to work and do not require consent.
| Name | Set by | Purpose | Duration |
|---|---|---|---|
sh_consent | Shmor | Remembers whether you accepted or rejected analytics cookies, so we do not ask on every page | 180 days |
sb-…-auth-token | Shmor, using Supabase | Keeps you signed in to your account. Set only when you sign in, not on the public website | Until you sign out, refreshed while you use the app |
When you pay, you are taken to a checkout page hosted by Stripe on its own website. Cookies Stripe sets there are covered by Stripe’s cookie policy.
Analytics, only with your consent
| Name | Set by | Purpose | Duration |
|---|---|---|---|
_ga | Google Analytics | Distinguishes visitors, so we can count how many people use a page | 2 years |
_ga_[ID] | Google Analytics | Keeps track of a visit, so pages viewed in one session are grouped together | 2 years |
sh_ga_evt | Shmor | Passes one event, such as “signed up” or “connected a CRM”, from our server to Google Analytics on the next page, then is deleted. Holds the event name only | 5 minutes |
Google Analytics is not loaded at all until you accept. We use Google Consent Mode with every setting denied by default. Accepting grants analytics storage only; advertising storage, advertising user data and ad personalisation always stay denied, and Google signals is switched off.
Besides page views, we send events such as signing up, starting a checkout, a purchase (the plan, the amount paid excluding VAT and a one-way code for the order, never the payment details), connecting a CRM, linking a chat and the first capture. Before anything reaches Google, we remove IDs and tokens from page addresses and drop query strings (except campaign tags such as utm_source), and we never send names, email addresses, phone numbers, what you type in forms or anything you send to the Shmor bot.
Why we ask for consent. UK law now allows some analytics cookies without consent when they are used only for statistical purposes on the site owner’s behalf. Google also uses Google Analytics data for its own purposes, so we do not treat it as falling under that exemption and ask for your consent instead.
Changes to this policy
If we add or change a cookie, we will update this page. If a change needs your consent, we will ask again.