Legal · Last updated 3 July 2026
Cookie Policy
This page lists exactly what stockisto.com stores in your browser — verified against the actual code, not a boilerplate template. There are no third-party trackers, no advertising cookies, and nothing is sold or shared with ad networks.
1. What we set, honestly
| Name | Type | Purpose | Duration | Needs consent? |
|---|---|---|---|---|
| stockisto_consent | Cookie | Remembers your accept/reject choice below, so we don't ask on every page. | 365 days | No — strictly necessary |
| stockisto_utm | Cookie | Remembers the campaign labels (utm_source, utm_medium, etc.) from the link you first arrived on, so we can see which campaigns bring visitors here. No personal data — only the labels your own inbound link already carried. | 30 days | Yes — analytics & attribution |
| stockisto_ref | Cookie + localStorage | If you arrived via a referral link (?ref=CODE), remembers the code so a resulting signup can be credited to the referring company. | 30 days (cookie); until cleared (localStorage) | Yes — analytics & attribution |
| stockisto_mktg_session | sessionStorage | A random id (not tied to your identity) that groups the analytics events fired from one browser tab session. | Until the tab closes | Yes — analytics & attribution |
2. Strictly necessary — no consent needed
The stockisto_consent cookie remembers your choice below. Under GDPR/ePrivacy this is exempt from consent: it is required to deliver the exact functionality you're using (not being re-asked on every page) and stores nothing beyond that choice.
3. Analytics & attribution — one category, gated on your choice
The other three items exist to answer one question honestly: which pages and campaigns bring people to Stockisto, and which referrals convert. They carry no advertising or cross-site tracking purpose, so we present them as a single accept/reject choice rather than a multi-category picker with nothing meaningful to split. Before you accept (or if you reject), none of the three are written, and any analytics event that would otherwise fire is dropped entirely — no beacon leaves your browser. If you'd previously accepted and then reject, we also clear what was already stored.
4. The embeddable Locator widget
If a supplier embeds our Locator widget on their own site, that widget does not use cookies, localStorage or sessionStorage at all, and does not fire analytics unless the embedding site explicitly turns it on. See our Security page for the full answer.