Introduction
This Cookie Policy describes how Sioma uses cookies on our website at sioma.ai, app.sioma.ai and any other site we operate (collectively, the "Website"). Sioma is not yet an incorporated company: it is operated by Sagi Gleizer as an individual trading as Sioma, and "we", "our" and "us" mean that operator.
Using the Website is not agreement to cookies. We ask you, once, in a banner on your first visit, and nothing loads from an analytics or advertising vendor until you have said yes — not the cookie, not the script, and no session replay. The only cookies set before you answer are the strictly necessary ones: what keeps you signed in, and what remembers your answer itself.
This Cookie Policy is an integral part of our privacy policy, which covers everything else we hold about you and how to ask for it or have it deleted.
1. What are cookies?
Cookies are small data files downloaded and stored on your device while you browse a website, often used to keep a record of actions taken on that site or to track related browsing activity. Some are set by the site you are visiting; others are set by third parties whose services that site loads.
Cookies are not the only thing a site can store. We also use localStorage and sessionStorage, which are not cleared by clearing your cookies — so the table below names both, rather than letting "cookie" stand in for all of them.
For more about cookies and how to control them, see your browser's help pages or aboutcookies.org.
2. What we set
The table below is generated from the same list that drives the cookie banner, so it cannot fall out of step with what the site actually loads.
| Name | Stored as | Purpose | Set by | Needs consent |
|---|---|---|---|---|
| Session cookie | Cookie | Keeps you signed in across app.sioma.ai. Without it you cannot use an account. | Us | No — strictly necessary |
| Consent choice (cc_cookie) | Cookie | Remembers what you chose here, so we stop asking. Shared across sioma.ai and app.sioma.ai. | Us | No — strictly necessary |
| Campaign record (sioma_attribution) | sessionStorage | The ad or link you arrived from, kept for this visit so a form you submit can be credited to it. Never sent to a third party, and cleared when you close the tab. | Us | No — strictly necessary |
| Analytics (ph_<project key>_posthog) | Cookie | Identifies your browser across visits so usage can be counted and funnels measured. It carries no name or email address. | PostHog | Yes |
| Analytics (mirror of the above) | localStorage | The same identifier, kept a second time so it survives a cleared cookie jar. | PostHog | Yes |
| Analytics (per-tab session id) | sessionStorage | Groups the pages you view in one tab into a single session. | PostHog | Yes |
| Analytics (_ga) | Cookie | Identifies your browser across visits so visits can be counted rather than double-counted. It carries no name or email address. | Yes | |
| Analytics (_ga_<container id>) | Cookie | Keeps track of when your visit started, so a return later today is not a new one. | Yes | |
| Advertising measurement | Cookie | Lets us see which ad or keyword brought you here, so we do not keep paying for ads that do not work. | Yes | |
| Advertising measurement | Cookie | Lets us see which Reddit ad brought you here, and whether it led anywhere. | Yes |
3. Opting out and changing your mind
Analytics is off until you accept it, wherever you are in the world. Rejecting is exactly as easy as accepting, and the banner never blocks the page. Your choice is stored in this browser, applies from your next page view including on future visits, and can be changed at any time:
Withdrawing consent stops capture and clears the identifier the analytics vendor had set for this browser.
You may also opt out through your browser. Most browsers let you control cookies — whether to accept them, how to remove them, and whether to warn you before one is set — and some, such as Google Chrome, let you block cookies from one specific site while leaving others alone. Browser extensions that block analytics work on this site too. Nothing here breaks if you use any of these: the Website has no cookie it needs in order to function, though blocking all of them means signing in again.
Browser privacy signals. Some browsers send a "Do Not Track" header, and some send a Global Privacy Control (GPC) signal, which asks a website not to sell or share your personal information. On this Website there is nothing for either of them to switch off. No analytics or advertising vendor runs at all unless you have accepted the banner; we do not sell your personal information; and ad personalisation is off for everyone, so nothing is shared for cross-context behavioural advertising. What those signals ask for is already what we do by default, for every visitor. The banner, not the signal, is the control — and you can change your answer at any time.
4. Details: who sets what
We use services provided by others to run the Website and the product. Some of those services collect data about you independently, for their own purposes, under their own privacy policies. The sub-processors whose services place cookies or similar storage in your browser are:
| Sub-processor | What it does | Their privacy policy |
|---|---|---|
| PostHog | Product analytics, with your consent | PostHog privacy policy |
| Google Analytics | Website analytics, with your consent | Google Analytics privacy policy |
| Google Ads | Measuring which ads bring people here, with your consent | Google Ads privacy policy |
| Reddit Ads | Measuring which ads bring people here, with your consent | Reddit Ads privacy policy |
Providers that process your information but set nothing in your browser — hosting and transactional email among them — are listed in full in section 5 of the privacy policy.
5. General
The same banner runs on sioma.ai and app.sioma.ai, and your answer carries across both.
We may change this Cookie Policy from time to time. Please check the "Last updated" date at the top of this page to see when it was last revised. If you have any question about cookies or about anything else we hold, write to privacy@sioma.ai.