Cookie Policy
This Cookie Policy explains how Konatamo LLC ("satooB", "we", "us", "our") uses cookies and similar tracking technologies on the satooB platform, websites, and related services (the "Service"). It supplements our Privacy Policy, which describes more broadly how we process personal data.
By using the Service you agree to the use of cookies as described in this Cookie Policy, subject to the consent regime applicable to your country of residence (see Section 4).
Cookies are small text files placed on your device by the websites you visit. They are widely used to make websites work, to remember your preferences, and to provide information to the operators of the website. Cookies can be set by the website you are visiting (first-party cookies) or by third parties whose services are embedded in the website (third-party cookies).
In addition to cookies in the strict sense, websites may also use related technologies such as local storage, session storage, pixels, device fingerprints, and server-side identifiers to achieve similar outcomes. In this Cookie Policy, "cookies" refers to all such technologies unless otherwise specified.
2. How we use cookies
We use cookies for three purposes:
- Strictly necessary cookies — required to deliver the Service you have requested. These include authentication, locale and currency selection, anti-CSRF protection, and the device-binding cookie used by the merchant cashier portal. Strictly-necessary cookies are set without your consent because the Service cannot operate without them, and the law (including ePrivacy Directive 2002/58/EC and CCPA/CPRA) explicitly excludes them from the consent requirement.
- Analytics & product cookies — help us understand how visitors interact with the Service, which features are used, and where users encounter friction. We use this information to operate, improve, and secure the Service. The legal basis depends on your country of residence (see Section 4).
- Marketing cookies — would be set if we ran targeted advertising. We do not currently set any marketing cookies. The corresponding row in the inventory below remains a placeholder for forward compatibility.
3. Detailed inventory
The full list of cookies and similar technologies set by the Service is reproduced below. We update this inventory whenever the underlying mechanism changes ; the "Last updated" date at the top of this Cookie Policy reflects the latest review.
| Name | Provider | Purpose | Duration | Type |
|---|---|---|---|---|
| satoob_session | satooB / Supabase | Authenticates your account session. | 1 hour (auto-renewed) | Essential |
| NEXT_LOCALE | satooB | Persists your selected language across visits. | 1 year | Essential |
| satoob_currency | satooB | Persists your displayed currency preference. | 90 days | Essential |
| satoob_consent | satooB | Records your cookie-consent state for the geo-aware banner. | 12 months | Essential |
| satoob_csrf | satooB | Protects forms against cross-site request forgery. | Session | Essential |
| satoob_device_id | satooB | Binds an authorised device to a merchant cashier account (PRO+ tier). | 15 years | Essential |
| satoob_beta_access | satooB | Grants pre-launch access through the beta gate, where applicable. | 90 days | Essential |
| ph_* | PostHog (EU) | Records anonymised product analytics, error tracking, and session diagnostics. | Up to 12 months | Analytics |
| — | — | No marketing cookies are currently set. This row is kept as a placeholder for future advertising integrations subject to consent. | — | Marketing |
The "Provider" column distinguishes cookies set by satooB itself (first-party) from cookies set by service providers acting on our behalf as data processors (e.g. Supabase, PostHog). When a provider has region-specific data residency, we have selected the EU instance where available — this is the case for PostHog, whose ph_* cookies are tied to the EU PostHog region (eu.posthog.com).
4. Consent — geographic regimes
Your cookie-consent experience depends on your country of residence. We honour the consent regime imposed by your local law and apply opt-in mechanisms where they are required. The default mechanism on a fresh visit is reflected in the geo-aware cookie banner.
Banner shown on first visit. Analytics and marketing cookies are not loaded until you give consent, in line with the ePrivacy Directive and the GDPR/UK GDPR. You can update your choices at any time from the cookie-settings link in the footer.
Banner shown on first visit. The Loi 25 (Quebec) and the LGPD (Brazil) require explicit consent before non-essential cookies are loaded. Your choices can be updated at any time from the cookie-settings link in the footer.
We do not display an opt-in banner ; instead, the CCPA/CPRA requires us to provide a "Do Not Sell or Share My Personal Information" link in the footer and to honour the Global Privacy Control ("GPC") signal sent by privacy-aware browsers. Even though we do not sell or share personal data for cross-context behavioural advertising, the GPC signal is treated as a valid opt-out from analytics-style processing for the duration of the session.
In jurisdictions where local law does not require an opt-in cookie banner, analytics cookies may be loaded by default. You can opt out at any time from the cookie-settings link in the footer or from your browser settings.
5. Managing cookies
You can manage cookies through several channels:
- In-app settings — the cookie-settings link in the footer of the Service opens a panel where you can review and change your consent for each non-essential category.
- Browser settings — every modern browser allows you to view, accept, or block cookies on a per-site basis. Refer to the documentation of your browser : Apple Safari, Google Chrome, Mozilla Firefox, Microsoft Edge, Brave.
- Do Not Track ("DNT") — when your browser sends a DNT header, we treat it as a signal that you do not wish to be tracked for analytics purposes, in line with the W3C recommendation and the IAB Transparency and Consent Framework.
- Global Privacy Control ("GPC") — when your browser sends the GPC signal, we treat it as an opt-out request and apply the same effect as if you had used the "Do Not Sell or Share My Personal Information" link.
Disabling strictly-necessary cookies will impair core functionality of the Service (you will not be able to authenticate, or your locale and currency preferences will not be remembered between visits).
6. Third-party cookies
We do not currently embed third-party content that sets independent cookies on your device beyond the analytics processor described in Section 3. If we add third-party content in the future (e.g. embedded video, social-media widgets, advertising), we will update this Cookie Policy and, where required by law, request your consent before such content is loaded.
7. Changes to this Cookie Policy
We may update this Cookie Policy from time to time to reflect changes in the technologies we use or in the law. If a change is material — for example, the addition of a new non-essential cookie category — we will provide reasonable advance notice and, where required, request your consent. Non-material changes (clarifications, typo fixes) are reflected in the "Last updated" date at the top of this document.
8. Contact
For questions about this Cookie Policy or about the cookies we set:
- Data Protection Officer — privacy@satoob.com
- Customer support — contact@satoob.com
Postal address (for legal service of process): Konatamo LLC, 1209 Mountain Road Pl NE, Ste R, Albuquerque, NM 87110, USA.