Cookie Policy

This Cookie Policy explains how Sentinel by Reviewal ("Sentinel," "we," "us," or "our") uses cookies and similar technologies when you access our website and application. It should be read together with our Privacy Policy.

1. What are cookies?

Cookies are small text files that a website places on your device when you visit it. They allow the website to remember your actions and preferences over time. Similar technologies (such as browser localStorage and sessionStorage) store data on your device without using cookies in the traditional sense. This Policy covers both.

2. What we use and why

2.1 Strictly necessary (authentication and security)

These are essential for you to sign in and use Sentinel. Without them, the Service cannot function. Disabling them in your browser will sign you out.

• Authentication session (Supabase Auth): stored in your browser's localStorage. Keeps you signed in between visits and refreshes your session automatically.
• Session security tokens: short-lived tokens (JWTs) used to authorize protected requests to the Sentinel backend.
• Password-recovery state: a flag that marks a session created from a password-reset link, so the Service can require you to set a new password before continuing.
• Idle-timeout state: the timestamp of your last activity, used to sign you out automatically after a period of inactivity.

2.2 Functional preferences

These remember your interface preferences so Sentinel looks and behaves the way you expect. All are stored in your browser's localStorage or sessionStorage.

• Interface theme (your light or dark preference).
• Active account context (which of your connected accounts is currently selected).
• Signed-in Sentinel accounts on this device. To let you switch between your own Sentinel logins without signing in again, we store, for each account added on that device, its email, display name, and session tokens. This is first-party storage on your own device. Signing out of an account removes its entry, and you should sign out on shared or public computers.
• Dashboard and section state (which panels are expanded or collapsed).
• Notification and dismissal flags (whether you have dismissed one-time prompts, including the product tour).
• Pending-invite and checkout-progress markers, so an interrupted invite or payment can resume correctly.
• Cached user preferences and compliance counters (a local copy used to reduce loading time and avoid repeated API calls).

2.3 Payment provider (Stripe)

When you enter a subscription checkout flow, our payment processor Stripe may set cookies to prevent fraud, comply with financial regulations, and secure the payment session. These cookies are classified as strictly necessary. Stripe's cookie usage is governed by Stripe's own Cookie Policy.

2.4 What we do NOT use

Sentinel does not use:

• Advertising cookies or ad-targeting pixels (no Meta Pixel, no Google Ads tag, no LinkedIn Insight tag).
• Cross-site tracking cookies.
• Third-party marketing cookies.
• Profiling or behavioral advertising cookies.
• Session replay or user recording tools that reconstruct your interactions.
• Third-party analytics that identify or track individual users.

3. Third-party requests from our website

Fonts and application code are served from our own domain, so loading Sentinel does not send your details to a third-party font or script network. Your browser does contact our authentication provider and our own API when you sign in, refresh your session, or load your data, and those services receive your IP address and the request itself. If you choose to sign in with Google, your browser also contacts Google for that sign-in. Both providers are listed as sub-processors in our Privacy Policy.

No other third party receives a request from your browser while you use the Service. An account with no picture of its own gets one drawn by your own browser, from its initial, so nothing leaves your device for it.

Payment pages hosted by Stripe are subject to Stripe's own cookie practices. If you wish to prevent third-party providers from receiving your IP address, you may use browser extensions that block them.

4. How to control cookies and browser storage

Because we do not use advertising or tracking cookies, we do not display a cookie consent banner. All the cookies and storage described above are either strictly necessary for the Service to function or store your own functional preferences.

You can nonetheless control cookies and browser storage in your browser settings. Most browsers allow you to view and delete cookies, block cookies from specific sites, clear all localStorage and sessionStorage data for a site, and use private browsing to prevent any storage.

5. Changes to this Cookie Policy

We may update this Cookie Policy from time to time. When we make material changes, we will update the "Last updated" date above and, where required, notify you via the Service. Continued use of Sentinel after an update constitutes your acceptance of the revised Policy.

6. Contact us

If you have questions about this Cookie Policy or our use of cookies and browser storage, please contact Reviewal at sentinel@reviewal.team.

Reviewal is the trading name of Chafai Solutions LLC, a limited liability company organized under the laws of the State of Delaware, United States, with registered office at 16192 Coastal Highway, Lewes, Delaware 19958, United States.