Cookie Policy
Effective 4 October 2026
This is the complete, current list — every cookie SmileSort sets, and why. Nothing here is a category description standing in for something we'd rather not name individually.
Strictly necessary — no choice needed
Under UK law (PECR), a cookie that's genuinely necessary to provide the service you asked for doesn't require consent — only disclosure. These do:
| Cookie | Purpose | Duration |
|---|---|---|
sb-* | Keeps you signed in. Without it, SmileSort can't tell you're logged in from one request to the next. | Up to 30 days, renewed while you use SmileSort; deleted when you sign out |
smilesort_ref | Remembers a partner referral or discount code through signup — including the round trip through Google sign-in, which briefly leaves this site. | 30 days |
ss_verify_email | Remembers the email address waiting to be verified — set when you sign up, or when you sign in before verifying — so the "Check your email" page can show where we sent your verification link and send it again, and so that link signs you in only in the browser you used. Deleted when you verify in that browser; otherwise it lapses on its own. | 2 hours |
ss_oauth_next | Remembers which page to return you to after signing in with Google. | 10 minutes |
smilesort_consent | Remembers your answer to the cookie banner (“Essential only” or “Accept all”) across smilesort.com and app.smilesort.com, so one answer — or a change of mind on either — counts for both, and so our server records a sign-up or a started plan for Meta only if you chose “Accept all”. | 1 year |
Preference — remembers a choice you made
These aren't required for the site to function, but they exist purely to remember something you told us — never to track you elsewhere or identify you to a third party.
| Cookie | Purpose | Duration |
|---|---|---|
smilesort_billing_interval | Remembers whether you were looking at monthly or annual pricing, so it doesn't reset between pages. | 30 days |
smilesort_plan | Remembers which plan you chose on the pricing page, so it's already selected when you pick your plan after signing up. | 30 days |
ss_intro | A one-time flag that plays our sign-in animation once, then deletes itself. Carries no identifying information. | 2 minutes, self-deleting |
Marketing — only if you choose “Accept all”
On our public website (smilesort.com — the home, pricing, features, about, FAQ, resources and security pages, and these policies), we use the Meta Pixel to measure how our adverts on Facebook and Instagram perform. It loads only after you choose “Accept all” on the cookie banner, never on arrival. Meta receives the address and title of the public page you're viewing, along with the identifiers below.
Inside SmileSort it reports exactly two moments, and only with the same choice: that an account has been created (with the plan you picked on our pricing page, if you picked one), and that a trial or subscription has started — which plan, monthly or annual, and its price. Never your name, email or practice, and never anything about your patients: the pixel is never on a page with patient information, on sign-in, sign-up or contact pages, or on a shared link, and it sends nothing from a page whose address carries anything beyond a referral or campaign tag or whether you were looking at monthly or annual pricing.
| Cookie | Set by | Purpose | Duration |
|---|---|---|---|
_fbp | Meta, on smilesort.com | Recognises your browser across visits so Meta can tell whether our adverts led to them. | 90 days |
_fbc | Meta, on smilesort.com | Set only when you arrive by clicking one of our adverts; records which click brought you. | 90 days |
ss_conv | SmileSort, on our domain | Set only if you chose “Accept all”, at the moment you create an account or a plan starts, so the next page can report that to Meta once. Deleted as soon as that page reads it. Carries no identifier: just which moment, and the plan you picked on our pricing page. | Up to 10 minutes |
ss_conv_done | SmileSort, on our domain | Set with ss_conv when a plan starts: remembers which checkout was reported (an opaque reference to it, never sent to Meta), so going back to that page doesn't count it twice. | 30 days |
fr and others | Meta, on facebook.com | Meta's own cookies, if you use Facebook or Instagram in this browser, governed by Meta's cookie policy. | Up to 90 days |
We don't run any other advertising or email tracking here: no Google Ads tag, and Klaviyo, which sends our own emails, works from our servers only — no Klaviyo script or cookie on our website or in the app. For this processing Meta Platforms Ireland Ltd and SmileSort are joint controllers; Meta's own use of the data is described in its privacy policy.
Analytics
SmileSort's own product analytics (feature usage, conversion funnels) are first-party only — no Google Analytics, no third-party analytics SDK of any kind — and don't use a separate tracking cookie. An analytics event is tied to your signed-in session where one exists, and recorded without any identifier at all before you sign up.
Local storage — not a cookie, but similar in spirit
A few features use your browser's local storage (not sent to our servers on every request, unlike a cookie) purely to remember a UI preference on your device: whether your sidebar is collapsed, whether you last viewed patient folders as a grid or a list, and — on our public resource-download form only — the email address you typed, so you don't have to retype it on a return visit. None of this is used for tracking or shared with any third party.
Your choices
The cookie banner on your first visit asks you to choose "Essential only" or "Accept all." Your answer counts for smilesort.com and app.smilesort.com alike. You can change your mind here at any time; choosing "Essential only" stops the Meta Pixel and deletes its cookies on our domain, including the two of ours above that exist only for it. You can also block or delete cookies entirely through your browser's own settings — doing so may sign you out or reset a remembered preference, but won't otherwise break the site.
You haven't chosen yet.
Contact
Questions about this policy? privacy@smilesort.com