Legal
Cookie Policy
Last updated: September 2026
This Cookie Policy explains which cookies and similar technologies SUF Digitals uses on sufdigitals.com and the artist portal at workstation.sufdigitals.com, what each is for, how long it lasts, and how you control it.
1. What cookies are
Cookies are small text files stored on your device by a website. Similar technologies, such as browser storage, work the same way. They let a site remember you between pages and visits: for keeping you signed in, for remembering a choice you made, and, with your permission, for measurement and advertising.
2. Three categories, and how we ask
When you first visit, a banner offers three choices with equal weight: accept all, reject everything that is not essential, or choose category by category. Nothing optional runs before you decide, and browsing with the banner open is treated as no consent. Your decision is stored for 182 days on that device, after which we ask again. We also ask again whenever this policy changes materially.
Essential. Always on and not subject to consent, because the site cannot work without them: the sign-in session for the artist portal, security cookies that protect the sign-in, and the cookie that records your cookie choice.
Analytics. Our own, first-party measurement of how the site is used: pages visited, links and buttons clicked, how far people scroll and where they pause, whether a form was started, and whether a purchase was started and completed. The data is stored on our own servers under a random visitor id. It is never sold, and no third-party analytics vendor receives it. With this category on, we may also show you messages on the site that depend on your browsing, such as a reminder to finish a plan you started or a code you were sent by email.
Targeted advertising. Loads the Meta Pixel (Meta Platforms) and the Google Ads tag (Google) so those platforms can measure our advertising and show you relevant SUF Digitals ads on Facebook, Instagram, Google Search and YouTube. If you hold an account with us, a one-way SHA-256 hash of your email address or phone number may be sent to those platforms as part of an audience list, for example so we can reach you on their platforms if you started a plan purchase and did not finish. The platforms cannot read the hash back into your address; they can only match it against accounts they already hold. When you buy a plan, our server also tells Meta about that purchase directly (the amount, your hashed email and phone, Meta's cookie on your browser, your IP address and browser type), so the sale is counted even if a browser blocks the Pixel. Nothing in this category loads or is sent until you choose it, and when you withdraw it we tell both platforms to stop and delete the cookies they set on our domain.
3. The cookies we set
| Name | Category | Purpose | Lasts |
|---|---|---|---|
| suf_session | Essential | Keeps you signed in to the artist portal. | Browser session; the sign-in itself expires after 30 days |
| suf_consent | Essential | Records your cookie choice, the policy version you accepted, and a random consent id. | 182 days |
| suf_ref | Essential | Set only when you arrive through a Refer and Earn link. Holds the referral code so the discount and the referrer's credit survive until you buy a plan. No identity, no tracking. | 90 days |
| suf_gstate | Essential | Set only when you choose Continue with Google. A random one-time value that makes sure the Google sign-in you finish is the one this browser started. No identity, no tracking. | 10 minutes |
| suf_offer | Essential | Remembers when your new visitor offer started, so the countdown and the discounted price stay the same on every SUF page and at checkout. Holds a time and nothing else. No identity, no tracking. So the offer is given once per internet connection, a one-way hash of your IP address (never the address itself) is kept with that time for 30 days, then deleted. | 400 days |
| suf_vid | Analytics | A random visitor id so return visits can be counted as one person. Deleted the moment analytics consent is withdrawn. | 12 months |
| suf_sid | Analytics | A random session id so the pages of one visit are kept together. | 30 minutes of inactivity |
| _fbp, _fbc | Advertising | Set by the Meta Pixel to measure and attribute Meta ads. | Up to 90 days |
| _gcl_au and related _gcl_* | Advertising | Set by the Google Ads tag to measure and attribute Google ads. | Up to 90 days |
We also use browser storage on the same device for a mirror of your cookie choice and, with analytics on, for short-lived session state. No cookie or storage item holds your name, email address or phone number.
4. What we keep, and for how long
Analytics event data (the individual clicks and scrolls) is kept for 90 days, then deleted. Session summaries are kept for 13 months. A visitor record that has not been seen for 13 months is anonymised. The record of your cookie decision is kept for three years as evidence that consent existed at the time. Audience lists shared with Meta and Google are refreshed continuously; a person who withdraws advertising consent is removed on the next refresh.
5. Managing and withdrawing
You can change or withdraw your choice at any time on the Cookie Settings page. Withdrawing turns everything optional off immediately, deletes the analytics cookies and the advertising cookies set on our domain, and unlinks your identity from the visitor record on our servers. Cookies that Meta or Google set on their own domains are theirs to delete; you can clear them from your browser or from your ad settings on those platforms. Blocking the essential session cookie will prevent the artist portal from working.
To ask for the data held under your consent id to be deleted, email support@sufdigitals.com quoting the id shown on the Cookie Settings page.
6. Changes
We update this policy when our use of cookies changes. The "last updated" date above reflects the current version, and a material change will bring the consent banner back so you can decide again.
Manage your preferences on the Cookie Settings page.