Cookie Notice

What this notice covers

This Cookie Notice explains how Smith & Johnson, Inc., which operates Sundream, uses cookies and similar technologies on the Sundream website and web application. It should be read with our Privacy Policy.

Cookies are small files a website stores in your browser. Similar technologies include local storage and session storage, which let a web application remember information in your browser without using a traditional cookie. Some records last only for a browser session; others remain until they expire or you remove them.

Necessary and functional technologies

Sundream uses first-party cookies and browser storage that are necessary to authenticate you, maintain and refresh secure sessions, route requests to the correct team workspace, preserve security and legal-consent records, and operate features you request.

We also use browser storage to remember choices such as theme, layout, generation defaults, whether a guide has been seen, and in-progress drafts or handoffs. Some of these preferences are not strictly necessary, but they are set by your use of the corresponding feature and are not used for advertising or cross-site tracking.

• Supabase serves authentication and session cookies needed to sign you in and keep the session secure.
• Sundream stores the active workspace and interface preferences so the application opens in the state you selected.
• Sundream stores your analytics choice so we can honor it without asking on every page. When signup and authentication happen in separate steps, we may also store a pending legal-acceptance record until it can be sent securely to our server.

Analytics, diagnostics, and session replay

If you accept analytics, PostHog uses a persistent identifier in a first-party cookie and local storage to connect activity across visits. We use it for page and feature usage, performance measurements, product analytics, and session replay.

Session replay records interactions such as clicks, pointer movement, scrolling, navigation, and the interface presented during a session. We configure PostHog to mask form-input values. Other text rendered in the interface, including workspace content shown outside a form field, may appear in a replay. Do not display material in the service that you are not authorized to process.

We count pageviews using a separate cookieless PostHog instance, including before you decide or if you decline optional analytics. It does not store an analytics identifier in cookies or browser storage, identify your account, or record sessions. PostHog derives daily audience counts on its servers using a rotating hash of the project, hostname, IP address, and browser user agent. We remove URL fragments and query parameters other than campaign labels from these pageviews. Error and interface-freeze diagnostics also continue without a persistent browser identifier. Signup and subscription totals come from our account and billing records, independently of optional analytics consent.

Advertising measurement

If you accept, Google Ads may set first-party conversion-linker cookies such as _gcl_aw. Sundream stores the originating Google click identifier (gclid, gbraid, or wbraid) in sd_adclick_v2 for up to 90 days and carries it into Stripe checkout metadata to attribute verified live payments. Our delivery queue removes click data after 90 days; Stripe billing records follow the billing retention described in the Privacy Policy. We do not enable ad personalization or remarketing. Before consent, the Google tag does not load and we do not store advertising click identifiers.

With permission, the Reddit Pixel measures page visits and completed account registrations. Reddit receives the page URL, browser information, its advertising identifiers, and a signup conversion identifier. The pixel may set first-party cookies such as _rdt_uuid. We do not configure automatic email or phone-number matching or send your scripts, media, email address, or payment details. Temporary signup measurement cookies expire after 30 minutes. The pixel does not load before consent; declining stops future signup measurement and clears the temporary signup cookies.

If we add a new non-essential category, we will update this notice and obtain consent before using it where the law requires.

Your choices

The Sundream consent banner lets you accept or decline identified analytics, session replay, and Google Ads, Reddit, and OpenAI Ads measurement. Your decision is stored in sd_consent_v4 for 90 days and in local browser storage. Necessary cookies and storage cannot be disabled through that banner because the requested account and workspace features depend on them.

Use Cookie preferences on this page to reopen the banner and choose Decline. This stops optional identified analytics, session replay, and advertising measurement and attribution on new checkouts, and removes the stored ad click. Cookieless pageview counts and operational account and billing records continue. It does not recall conversions already sent or consent attached to a checkout already started; contact us for a data-deletion request. Controls apply to this browser. You can also clear site data, which signs you out and removes local preferences and browser-only drafts.

Most browsers let you view, block, or delete cookies and site data. Blocking necessary technologies may prevent sign-in, team routing, saved preferences, or other parts of Sundream from working correctly. Controls apply separately to each browser and device.

Changes and contact

We may update this Cookie Notice when our technologies or legal obligations change. We will update the date above and request consent again before materially expanding consent-based collection.

Questions about this Cookie Notice can be sent to support@sundream.studio, or by post to Smith & Johnson, Inc., c/o Legalinc Corporate Services Inc., 131 Continental Dr, Suite 305, Newark, DE 19713, United States.