Legal
Cookie Policy
SPARK uses only strictly necessary cookies and browser storage. There are no advertising or analytics trackers. This page lists exactly what is stored and why.
Last updated 16 September 2026
Cookies and similar technologies (local storage and session storage) are small pieces of data a website stores in your browser. SPARK uses them only where they are necessary to sign you in, remember your settings and keep the service secure. We do not use advertising cookies, and we do not run third-party analytics or tracking scripts on this website or in the application.
Because everything we store is strictly necessary, we do not ask for consent. The notice at the bottom of the website simply tells you this and links here.
1. Storage used on the website
- spark-marketing-theme (local storage): remembers whether you chose light or dark mode. Kept until you clear it.
- spark-cookie-notice (local storage): records that you have dismissed the cookie notice. Kept until you clear it.
2. Storage used in the application
When you sign in to the platform, your browser stores:
- The Supabase authentication session (local storage key beginning sb-): keeps you signed in between visits. Cleared when you sign out.
- msp_settings: your interface preferences, such as theme.
- spark.sidebar.collapsed and report-builder-layout: layout choices you have made.
- solo_onboarding_complete: whether the first-run guide has been finished.
- login_attempts and lockout_until (session storage): sign-in rate limiting. Cleared when the tab closes.
- spa_redirect_path (session storage): returns you to the page you asked for after signing in.
- impersonated_org and impersonated_portal_user: used only by YOT support staff while assisting a customer, and cleared when they stop.
3. Third-party services
- Stripe: when you subscribe, you are taken to Stripe's hosted checkout at checkout.stripe.com. Stripe sets its own cookies there for fraud prevention and to complete payment, under Stripe's cookie policy.
- Google Fonts: the Inter and JetBrains Mono typefaces are loaded from fonts.googleapis.com. Google does not set cookies for this, but its servers receive your IP address when the fonts load.
- Brandfetch: the brand logos on the integrations section are loaded from cdn.brandfetch.io, which receives your IP address when they load. No cookies are set.
- Vendor cloud consoles: links you open to Meraki, UniFi or other vendor dashboards are governed by those vendors' policies.
4. How to control storage
You can clear or block storage in your browser's settings at any time. Clearing local storage signs you out of the application and resets your theme choice; blocking it entirely prevents you from signing in.
We honour the principle behind Do Not Track and Global Privacy Control by default: there is nothing to opt out of, because we do not track you.
5. Changes
If we introduce any storage that is not strictly necessary, for example product analytics, we will update this page and ask for your consent before it is used.
Questions about this document can be sent to support@sparkdock.io. For privacy matters specifically, use privacy@sparkdock.io.