Sayo Cookies and Analytics Policy

This Policy separates essential storage from optional, consent-based product analytics.

1. Essential storage

The essential category is limited to authentication, security, session continuity, consent records, load management, and user-requested settings. Before release, a technical inventory must verify each item's name, operator, purpose, lifetime, and first- or third-party status. Essential storage is not used for advertising and cannot always be disabled without ending the affected function. Card payment takes place on a separate checkout page operated by Stripe; cookies and storage used on that page and on the Link website are set by Stripe and Link under their own policies. Sayo pages do not load Stripe scripts or set cookies for payment.

2. Analytics is off by default

Optional product analytics is off by default. The release switch is [UNRESOLVED:features.analytics]. Even when the switch is on, a public page loads analytics only after this browser has recorded an affirmative choice that matches the current policy version and was made within the last year. If no choice is recorded, if the choice is declined or withdrawn, if it was made under a different policy version, or if the record cannot be read, analytics does not load and core service continues. The choice is stored in this browser's local storage and is not sent to our servers. The app (/app/), My Stocks, related-search results and legal document pages carry no analytics regardless of the choice.

3. Analytics vendor and storage

If optional analytics is enabled, we disclose the vendor legal name Google LLC, policy https://policies.google.com/privacy and https://policies.google.com/technologies/partner-sites, processing country [UNRESOLVED:analytics.processing_country], cookie configuration Two first-party cookies set by the Google tag only after the visitor allows analytics: _ga, used to distinguish users, and _ga_<container-id\>, used to persist session state. Each is set with a two-year expiry; browsers that cap cookie lifetime (Chrome caps it at 400 days) shorten it. Withdrawal deletes every cookie whose name starts with _ga., browser storage [UNRESOLVED:analytics.storage], and contracted processor [UNRESOLVED:processors.analytics.contract_legal_name].

4. Allowed events

Analytics may collect only the reviewed event allowlist [UNRESOLVED:analytics.allowed_events] for aggregate product measurement. Event names and properties must be documented and tested before activation.

5. Prohibited data

Analytics must not receive chat or prompt text, model responses, notes, attachment contents or names, tool input or output, cited extracts, payment details, authentication tokens, precise investment interests, or stable identifiers not expressly approved. We do not use analytics for advertising, profiling for ads, or cross-context behavioral advertising. The page address sent to the analytics vendor keeps only the domain, the path and campaign tags (utm parameters); every other query string and the fragment are removed. A page whose address carries any other query string or a fragment with a value does not load analytics. Only the title a page had when it first opened is sent, and analytics loads with Google Signals and ad personalization signals turned off. Google states in its public documentation that Google Analytics 4 does not log or store IP addresses.

6. Retention

The verified analytics retention is [UNRESOLVED:analytics.retention]; the corresponding first-party data schedule is [UNRESOLVED:data.analytics.retention]. If those values are not verified, analytics remains unavailable.

The opt-in mechanism is a bottom bar on public pages, shown only when analytics is on, that asks separately from terms and privacy notices, offers allow and decline in the same shape and size with nothing preselected, and loads analytics only after allow. The choice is kept in this browser's local storage for one year and tied to the cookie policy version, so a policy version change or an expired choice asks again. When analytics is on, the choice can be changed or withdrawn at any time through the "분석 설정" (Analytics settings) control at the bottom of public pages. Declining analytics does not prevent essential service use, and silence, scrolling, or a bundled terms acceptance is not analytics consent. When analytics is on, a first public-page visit shows a bottom bar that presents allow and decline in the same shape and size with no preselected option, and analytics does not load before a choice is made.

8. Withdrawal

When analytics is on, anyone, signed in or not, may change or withdraw analytics consent at any time through the "분석 설정" (Analytics settings) control at the bottom of public pages; the site shows the Korean label. Withdrawal records a declined choice, deletes the analytics cookies set on this site, and stops further analytics calls in that tab and in other open tabs of this browser. Requests already sent cannot be recalled. The declined choice is kept so that we do not ask again. Withdrawal does not retroactively invalidate processing performed under a valid choice and does not end core service.

9. Changes

Adding a vendor, event, purpose, identifier, country, or longer retention requires a new review. We will update this policy and obtain new consent before a material expansion where required.