Cookies & similar technologies
Effective date: May 11, 2026 Version: 1.0.0
This page describes every cookie, local-storage key, and similar technology that sentinel-os.ca may set on your device. We apply Quebec's Loi 25 and the EU ePrivacy Directive: nothing other than strictly-necessary technologies fires before you give us consent, and refusal is exactly as easy as acceptance.
If you want to change your choices now, use the Cookie preferences link in the footer.
What we use today
The vast majority of these are first-party and strictly necessary for the site to work. We do not embed third-party advertising trackers, session-replay tools, or social-media pixels.
| Name | Type | Category | Purpose | Duration |
|---|---|---|---|---|
| `sentinel_consent` | First-party cookie + localStorage | Strictly necessary | Stores your cookie choices and the version you accepted | 12 months |
| `sentinel_locale` | First-party cookie | Strictly necessary | Remembers your language (EN / FR) across visits | 12 months |
| `sentinel_theme` | First-party cookie | Preferences | Remembers your colour-scheme choice (dark / light / system) | 12 months |
| `lenis_scroll` | localStorage | Preferences | Preserves the smooth-scroll position when navigating between pages | Session |
| `sb-access-token`, `sb-refresh-token` | First-party HttpOnly cookie | Strictly necessary | Supabase authentication session (only on authenticated areas of the SaaS) | 1 hour / 30 days |
| `__cf_bm` | First-party cookie set by Cloudflare on Vercel edge | Strictly necessary | Bot mitigation on the Vercel network | 30 minutes |
What we will use only with consent (planned)
These are not active today. We will turn them on only after you opt in via the preferences modal, and we will update this inventory before doing so.
| Name | Type | Category | Purpose | Duration |
|---|---|---|---|---|
| `_vercel_analytics` | First-party, cookieless aggregate | Analytics | Anonymous page-view counts. No fingerprinting, no cross-site tracking | Session |
| `_plausible` (if adopted) | First-party, no personal data | Analytics | Privacy-friendly site analytics, EU-hosted | 24 hours |
| `sentinel_marketing` | First-party cookie | Marketing | Attribution and conversion tracking for campaign clicks (only when we run a campaign) | 90 days |
What we explicitly do NOT use
We refuse to add: Google Analytics with default settings, Meta / Facebook Pixel, TikTok Pixel, advertising-network trackers, session-replay tools, fingerprinting libraries, third-party cross-site tracking cookies of any kind. If you ever see one in your browser DevTools network tab while visiting sentinel-os.ca, write to privacy@sentinel-os.ca — it is a bug we will fix.
Your choices
You have four categories you can control independently from the cookie preferences modal.
- Strictly necessary — always on. Required for the site to work. Cannot be turned off because there is no site without them.
- Preferences — small conveniences like remembering your dark / light theme.
- Analytics — anonymous, aggregated statistics that help us understand which pages are useful. Cookieless when possible.
- Marketing — attribution and conversion tracking for campaign clicks. We will not be running campaigns until late 2026, so this category is dormant.
You can change your mind at any time. Open the Cookie preferences link in the footer of every page.
Withdrawing consent
Withdrawing consent is exactly as easy as giving it. Click Cookie preferences in the footer, flip the categories you no longer want, and click Save preferences. Your previously-stored choices are overwritten and any optional cookies in those categories are stopped from firing on future page loads.
If you want a clean slate — including the consent cookie itself — write to privacy@sentinel-os.ca and we will reset your record on our side as well.
More on data protection
See our Privacy Policy for the full picture, our Loi 25 disclosure for Quebec-specific obligations, and our Accessibility statement for how the cookie controls are made keyboard- and screen-reader-friendly.