Cookie Policy
Effective Date: September 15, 2026
Service: https://simpleloonie.ca
Contact: info@shinobimedia.ca
The short version: we set one cookie, and it is the one that keeps you signed in. No analytics, no advertising, no tracking, and nothing that follows you to other sites.
1. What Cookies Are
Cookies are small text files a website asks your browser to store and send back on later requests. They are how a site can tell that the person loading a page is the same person who signed in a minute ago.
2. The Cookie We Set
| Cookie | Purpose | Type | Lifetime |
|---|---|---|---|
| wos-session | Keeps you signed in. Set by AuthKit, the authentication library from our sign-in provider WorkOS, and encrypted so its contents can only be read by our server. | Strictly necessary | Until you sign out or the session expires |
That is the entire list. We do not use browser storage to track you either: the app keeps no analytics identifiers, advertising identifiers or behavioural profiles in your browser.
3. What We Do Not Use Cookies For
- Advertising, retargeting or audience building — we run no ad tech at all
- Analytics or usage tracking — we have no Google Analytics, no Meta pixel, no session recording
- Behavioural profiling, or sharing your browsing with third parties
- Social media buttons or embeds that phone home
4. Third Parties and Your Browser
A few providers are involved in running the service, but most of them never touch your browser — our server talks to them and returns the result:
| Provider | Role | Touches your browser? |
|---|---|---|
| WorkOS | Sign-in | Yes — the session cookie above, plus its own cookies on the WorkOS sign-in page while you are on it |
| Stripe | Checkout and the billing portal | Only on Stripe's own pages, where it sets cookies needed for payment and fraud prevention. We embed no Stripe scripts in our pages. |
| Cloudflare R2 | File storage | No — your documents are streamed through an authenticated route on our own domain, so there are no public file links and no third-party requests |
| AI providers | Reading your receipts (see AI disclosure) | No — server to server only, no cookies |
| Sentry | Error monitoring, when enabled in our deployment | No cookies, but when an error occurs it reports technical details of the page and request |
5. Your Choices
We show no cookie banner, because the only cookie we set is the one required to sign you in — under Canadian privacy law your consent to a strictly necessary cookie is implied by using the service, and there is no tracking to opt out of.
You can still block or delete cookies in your browser settings. If you block ours, sign-in will not work: without the session cookie every page load looks like a new, unauthenticated visitor.
6. Updates to This Policy
If we ever add a cookie, this page changes first and the Effective Date above moves with it. Were we to introduce anything beyond strictly necessary cookies, we would ask for your consent before setting it.
7. Contact
Questions about cookies, or about anything in our Privacy Policy, go to info@shinobimedia.ca.