Cookie Policy
Last updated —
Placeholder pending legal review. The categories are accurate to how the product is built; specific cookie names, durations, and the consent mechanism must be confirmed with counsel before launch.
This website
The SendNectar marketing site is built as static pages and is deliberately light on client-side machinery. It sets no advertising cookies and embeds no third-party trackers. Fonts are self-hosted and served from our own origin rather than fetched from a third party.
The application
Cookies in the SendNectar application fall into two categories.
Strictly necessary
- Session and authentication — keeps you signed in and identifies your active workspace. Without these the application cannot function.
- Security — cross-site request forgery protection on state-changing requests.
- Preferences — small settings such as the workspace you last had open.
These are set on a first-party domain and are not used for advertising or cross-site profiling.
Not used
We do not set advertising cookies, do not participate in cross-site advertising networks, and do not sell or share personal data for behavioural advertising.
First-party tracking you can enable
Separately from our own cookies, SendNectar provides customers with first-party website tracking. When you add a website to a brand and install the tracking script on it, SendNectar can record anonymous and identified sessions on your domain — landing URL, start time, and last-seen time — and connect on-site behaviour to a contact.
Three things matter about this:
- It runs on your domain, under your privacy policy, and the cookies it sets are first-party to you.
- You are the controller for that data. Obtaining valid consent from your visitors, where your jurisdiction requires it, is your responsibility.
- Websites carry an explicit allowed-origins list, so tracking only operates on origins you have authorised.
Email tracking
Open and click tracking in email uses tracking pixels and redirect links on your own tracking domain, not cookies. Tracking settings are configured per campaign, and the resulting events are yours. Where your jurisdiction requires disclosure or consent for open and click tracking, that obligation sits with you as the sender.
Managing cookies
Most browsers let you block or delete cookies. Blocking strictly necessary cookies will prevent you from signing in to the application. Blocking cookies in your own visitors' browsers is their choice and is honoured by first-party tracking.
Changes and questions
Material changes to this policy will be reflected in the updated date above. For questions, email [email protected], or see the Privacy Policy and DPA.