Cookie Policy
SponsorGuard uses strictly-necessary cookies to keep you signed in and protect your account, plus optional Google Analytics cookies that load only if you accept them. We use no advertising or profiling cookies.
Last updated: 30 June 2026
Two kinds of cookies
Strictly-necessary cookies are essential — they let you sign in, keep your session secure, and remember your active workspace. Under PECR these do not require prior consent. Analytics cookies (Google Analytics) are optional: they load only if you choose “Accept all” on the banner. Choose “Necessary only” and no analytics cookie is ever set — you can use SponsorGuard fully either way.
Cookies we set
| Cookie | Category | Purpose | Duration | httpOnly |
|---|---|---|---|---|
| sg_session | Strictly necessary | Authenticates your signed-in session so you stay logged in securely. | Session / login lifetime | Yes (httpOnly) |
| sg_csrf | Strictly necessary | Protects against cross-site request forgery (CSRF) on form and API actions. | Session / login lifetime | No (read by the app to send a matching header) |
| Worker portal session | Strictly necessary | Authenticates a sponsored worker who signs in to the worker self-service portal. | Session / login lifetime | Yes (httpOnly) |
| sg_active_tenant | Strictly necessary | Remembers which workspace (tenant) you have selected as active while signed in. | Session (cleared on browser close) | Yes (httpOnly) |
| _ga | Analytics (optional — only with consent) | Google Analytics: distinguishes visitors to measure how the site is used. Set only if you choose ‘Accept all’. | Up to 2 years | No (third-party: Google) |
| _ga_GWRRYLL9G8 | Analytics (optional — only with consent) | Google Analytics 4: persists session state for this property. Set only if you choose ‘Accept all’. | Up to 2 years | No (third-party: Google) |
Analytics (Google Analytics) — opt-in
With your consent we use Google Analytics 4 to understand how the site is used so we can improve it. The Google Analytics script and its cookies (_ga, _ga_*) load only after you choose “Accept all” — nothing is sent to Google before then. We use no advertising, profiling, or data-selling cookies. To withdraw consent, clear this site's data in your browser; the banner will reappear for a fresh choice.
Managing cookies
Because the cookies above are strictly necessary, blocking them in your browser will prevent you from signing in or using the service securely. Your acknowledgement of this notice is stored locally in your browser (not as a cookie) so the banner does not reappear on every visit.
This Cookie Policy is provided as a template and should be confirmed by your organisation's data protection officer or legal adviser.