Cookie Policy
Last updated: October 15, 2026
This Cookie Policy explains the cookies and similar technologies (such as browser local storage) that striveloom.com and the Striveloom web application use, why we use them, and how you can control them. Striveloom is operated by Rioco LLC, a Wyoming limited liability company doing business as Striveloom, 30 N Gould St STE R, Sheridan, WY 82801, United States. It should be read together with our Privacy Policy.
1. What cookies are
Cookies are small text files a website stores in your browser. “Similar technologies” include local storage and session storage, which work the same way but are not sent to our servers automatically. In this policy we call them all “cookies”. First-party cookies are set by striveloom.com; third-party cookies are set by another company's domain.
2. The categories we use
- Strictly necessary — needed to sign you in, keep the service secure, protect forms from bots, and remember your cookie choice. They do not require consent and cannot be switched off in our banner.
- Functional — remember choices you make, such as language and theme. They are first-party and are not used to track you across other websites.
- Analytics (optional) — PostHog product analytics and our own theme-marketplace statistics. Controlled by the “Analytics” switch in the banner.
- Advertising (optional) — the Google Ads tag, for conversion measurement and remarketing. Controlled by the “Marketing” switch in the banner.
3. Cookies we use
The tables below list the cookies set by our own code and by the third-party tools we load. Names with <…> contain a project-specific identifier. Durations for third-party cookies are set by the provider and may change.
Strictly necessary
| Name | Provider / type | Purpose | Duration |
|---|---|---|---|
| sb-<project>-auth-token (may be split into .0, .1 …) | Striveloom via Supabase · first-party cookie | Keeps you signed in and secures your session. Set only when you sign in. | Up to 400 days, refreshed while you use the app; removed when you sign out |
| sb-<project>-auth-token-code-verifier | Striveloom via Supabase · first-party cookie | Completes secure sign-in flows (Google/Facebook sign-in, email links). | Until the sign-in flow completes |
| sl_impersonate | Striveloom · first-party cookie | Platform administrators only: a signed, time-limited token used when support staff view the app as a customer. Never set for visitors or customers. | Up to 60 minutes |
| linkedin_oauth_state | Striveloom · first-party cookie | Security token that protects the LinkedIn account-connection flow against forgery. | 10 minutes |
| striveloom:cookie-consent:v1 | Striveloom · browser local storage | Remembers your cookie choices (and whether Global Privacy Control was on when you made them) so we do not ask again. | Until you clear site data or change your choice |
| __ph_opt_in_out_<key> | PostHog SDK · browser local storage | Records that you opted in to or out of PostHog analytics, so the SDK respects your choice. Written only after you make a choice. | Until you clear site data |
| hCaptcha | Intuition Machines, Inc. · third-party | Bot and spam protection on the sign-up, sign-in and booking forms. hCaptcha may use cookies or similar storage needed to run the challenge. | Set by hCaptcha; see the hCaptcha privacy policy |
Functional
| Name | Provider / type | Purpose | Duration |
|---|---|---|---|
| striveloom-locale | Striveloom · first-party cookie | Remembers the language you chose. | 1 year |
| sl_theme, sl_theme_user_chose | Striveloom · first-party cookie | Remembers the website theme you picked (or one suggested from the page that referred you). | 1 year (suggested theme: 30 days) |
| sl_preview_theme | Striveloom · first-party cookie | Lets you preview a theme from the theme marketplace. | Session (until you close the browser) |
| sl_user_color_mode | Striveloom · first-party cookie | Remembers the light/dark mode you chose in your account settings. | 1 year |
| sl_density, sl_accent, sl_color_mode, sl_customization_preview | Striveloom · first-party cookie | Appearance settings in the admin and theme editor (signed-in workspace users only). | 1 year (preview: session) |
| kb_fb_<article> | Striveloom · first-party cookie | Remembers that you already rated a help-center article. | 1 year |
| sl_referrer | Striveloom · first-party cookie | Stores a partner referral code when you arrive through a referral link (?ref=…) so the partner is credited if you sign up. | 90 days |
| Other preference keys (e.g. sl_theme_hint_dismissed, sl_preloader_seen_v2, striveloom:sound-enabled:v1, striveloom:concierge:transcript:v1) | Striveloom · browser local/session storage | Remember small interface choices, such as dismissed hints, and keep your on-site assistant conversation while you browse. Not sent to third parties. | Until you clear site data (session keys: until the tab closes) |
Analytics (optional)
| Name | Provider / type | Purpose | Duration |
|---|---|---|---|
| ph_<project key>_posthog | PostHog, Inc. · first-party cookie and local storage | Product analytics: a random visitor ID and session information so we can count page views and in-app events and understand how the site is used. When you are signed in and have consented, linked to your user ID and email. | 1 year |
| sl_theme_session_id | Striveloom · browser local storage | Random ID that groups theme-marketplace events (views, switches) for our own aggregate reporting. Without analytics consent we use a temporary in-page ID instead and store nothing. | Until you clear site data |
| Vercel Web Analytics and Speed Insights | Vercel Inc. · no cookies | Aggregate page-view and performance measurement. Does not use cookies or persistent identifiers, so it runs for every visitor. | No cookie stored |
Advertising (optional)
| Name | Provider / type | Purpose | Duration |
|---|---|---|---|
| _gcl_au | Google LLC · first-party cookie set by gtag.js | Google Ads conversion linker: lets Google attribute a purchase or booked call to an ad click. | 90 days |
| _gcl_aw, _gcl_gb | Google LLC · first-party cookie set by gtag.js | Stores the ad-click identifier (gclid / gbraid) when you arrive from a Google ad. | 90 days |
| Google domain cookies (for example IDE, test_cookie, ar_debug on doubleclick.net) | Google LLC · third-party cookies | Conversion measurement and remarketing, which may show you Striveloom ads on other sites. | Set by Google; typically up to 13 months |
Payments
When you check out, you are sent to a payment page hosted by Stripe at checkout.stripe.com. Stripe sets its own cookies there (for example for fraud prevention); they are governed by Stripe's cookie policy. We do not load Stripe scripts on striveloom.com.
4. How consent works
Visitors in the EEA, the UK and Switzerland
We work out your approximate region from your IP address (using the country our hosting provider, Vercel, attaches to each request; we do not store it for this purpose). If you are in the European Economic Area, the United Kingdom or Switzerland, optional cookies are off until you opt in:
- The cookie banner is shown until you make a choice. Its switches start in the off position.
- PostHog starts in an opted-out state with in-memory storage only: it sets no cookies, stores nothing in your browser, captures no events and does not identify you.
- The Google Ads tag runs in Google Consent Mode v2 with
ad_storage,ad_user_data,ad_personalizationandanalytics_storageset to “denied”. In that state it sets no advertising cookies; Google may receive cookieless signals (for example that a conversion such as a purchase or booked call happened), which it uses only in aggregate and modelled form.
Visitors elsewhere
Outside those regions, analytics and advertising cookies are on by default and the banner gives you the choice to reject them. If you reject, PostHog is switched off and its stored data is removed from your browser, and Google Consent Mode is updated to “denied” for all four signals.
Global Privacy Control
We honor the Global Privacy Control (GPC) signal. If your browser sends it, we treat it as a rejection of analytics and advertising cookies (including a request to opt out of “sharing” for cross-context behavioral advertising under California law), in every region, without asking you. A GPC signal also overrides a choice you made earlier without it. If you later turn analytics or marketing on in our cookie settings while GPC is on, we respect that explicit choice.
What we do not block
Strictly necessary and functional cookies, and cookieless Vercel Analytics, run regardless of your choice, because the site needs them or they do not identify you across sites.
5. Changing your choice
You can change or withdraw your consent at any time. Withdrawing does not affect processing that happened before. Use the “Cookie settings” link in the site footer, or this button: .
Your choice is stored in your browser, so you will need to set it again on another device or browser, or after clearing your site data.
6. Browser and third-party controls
- Most browsers let you block or delete cookies in their settings. Blocking strictly necessary cookies will stop you from signing in.
- Google ad personalization: adssettings.google.com. Interest-based advertising opt-outs: optout.aboutads.info and youronlinechoices.eu.
- Provider policies: How Google uses cookies, Google business data responsibility, PostHog privacy policy, Vercel Analytics privacy, hCaptcha privacy policy.
7. Changes to this policy
We will update this policy when the cookies we use change, and post the new version here with a new “Last updated” date.
8. Contact
Rioco LLC (dba Striveloom)
30 N Gould St STE R, Sheridan, WY 82801, United States
Privacy questions: hello@striveloom.com
See also our Privacy Policy, Terms of Service and Data Processing Addendum.