Cookie policy

What a cookie is

A cookie is a small text file a website stores on your device. Some are strictly necessary for a site to work. Others are optional and measure how a site performs. Similar technologies, including local storage and pixels, are treated the same way in this policy.

Nothing optional is set until you agree

When you first arrive, the only thing that loads is the consent banner itself, which is part of the page and makes no request to anyone else. No optional cookie is set, and no analytics or marketing tracking runs, until you turn that category on. The one exception is the cookieless page-speed measurement described below. If you reject, nothing in the optional categories below is ever set.

There are three optional categories, and each is off until you choose otherwise:

• Analytics: Google Analytics 4, which counts visits and shows which pages are useful.
• Product analytics: PostHog, which shows how visitors move from this site into the IdentityCheck app.
• Marketing: HubSpot tracking, which links your visits to an enquiry you send us.

Your choice lasts six months, whichever way you answer. After that, or if the choices on offer change, we ask again.

Page-speed measurement, without cookies

Our host, Cloudflare, measures how quickly each page loads for every visitor, using its Web Analytics service. It sets no cookies, uses no identifier that follows you between visits or sites, and does not build a profile of you. It records the page, load timings and broad details such as browser type and country, so we can find and fix slow pages. Cloudflare is listed on our sub-processors page.

Global Privacy Control

If your browser sends a Global Privacy Control signal and you have not made a choice here, we treat the signal as a rejection of every optional category, record that, and do not show the banner. You can still turn categories on from Cookie settings.

Every cookie this site sets

Cookie	Set by	Category	Purpose	Expires
sg-consent	StackGo	Strictly necessary	Records which optional categories you turned on or left off, when, and a random consent ID, so you are not asked again on every page. Set on stackgo.io and its subdomains so the IdentityCheck app can respect the same choice.	6 months
_ga	Google Analytics	Analytics	Distinguishes one visitor from another so visits can be counted without identifying anyone.	2 years
_ga_X3QSGD4793	Google Analytics	Analytics	Maintains the session for this specific Google Analytics property.	2 years
ph_phc_wkQxJT6qwC4c7AVAjibM6hfK6d9vrCzpclwZXFb6aFF_posthog	PostHog	Product analytics	Identifies a returning browser so a visit can be understood as one journey rather than a series of unrelated page views.	1 year
sg-first-touch	StackGo	Product analytics	Remembers where your first visit came from (for example a search engine, a partner or a campaign link), the page you landed on and the date, so a sign-up or demo booking can be credited to it. Holds no personal details and no ID. Set on stackgo.io and its subdomains so the IdentityCheck app can read it.	3 months
__hstc	HubSpot	Marketing	Tracks visits: the first, last and current visit time and the number of sessions.	6 months
hubspotutk	HubSpot	Marketing	Identifies a returning browser, and links a form submission to the visits before it.	6 months
__hssc	HubSpot	Marketing	Counts page views in a session, to tell whether a new session has started.	30 minutes
__hssrc	HubSpot	Marketing	Tells HubSpot whether the browser has restarted, to start a new session.	End of session

If you used this site before 28 October 2026, your answer was stored by CookieYes in a cookie called cookieyes-consent. The first time you return, we read that answer once, carry it over to sg-consent, and delete the old cookie, so you are not asked twice.

What we deliberately do not do

We do not use advertising or cross-site tracking cookies.

Session recording is switched off. PostHog is capable of replaying a visitor's session, and it is turned off for this website. So is autocapture, which would otherwise record every click and form interaction automatically. We collect the specific events listed in the privacy policy and nothing else.

We are aware that being legally permitted to collect something is not the same as it being a reasonable thing to collect from someone evaluating how we handle data.

Why the same analytics cookie covers the app

PostHog uses one cookie across stackgo.io and identity.stackgo.io. This is deliberate. It means that when a customer signs in, we can understand the path that led there as a single journey rather than as two unrelated visitors. It is the same consent decision and the same optional category described above.

Forms and enquiries

When you submit a form, what you enter is sent to our customer system so we can respond. That is described in the privacy policy, and the providers involved are listed on the sub-processors page.

How to change your mind

Use the banner when you first visit, or open Cookie settings at any time from the bottom of any page, or here:

Change cookie settings

Turning a category off stops it from that moment: we tell the tool to stop and delete the cookies it set on this site. Anything already running on the page you are on stops completely when you reload it.

Independently of us, every major browser lets you block or delete cookies in its settings. Blocking strictly necessary cookies may stop parts of the site working.

Our record of your choice

Each time you make or change a choice, we keep a record so we can show that consent was given or refused. It holds the random consent ID from your sg-consent cookie, the time, what you chose for each category, how you chose (banner, settings, or a browser signal), the version of the banner and of this policy, the page you were on, the site address, and the country your connection came from. It does not hold your IP address, your name, or anything that identifies you directly. Records are kept for 24 months, then deleted.

Questions

Email privacy@stackgo.io.