This page lists every cookie and every item of browser storage that Sentinel Connector (the "Service") places on your device. Browser storage means the local storage and session storage that your browser keeps for a website. It is treated in the same way as cookies.
1. What we use today
Almost everything the Service stores is strictly necessary. Each of those items either signs you in, protects your account, records a choice you made, or remembers an interface setting that you chose. The Service does not work without them, so we do not ask for your consent to use them.
The one exception is optional analytics. On our public pages we ask whether we may use Google Tag Manager and Google Analytics to measure visits. Nothing is loaded from Google, and no analytics cookie is set, unless you accept. Analytics never runs on sign-in pages or inside the dashboard.
The Service does not use advertising, session recording, chat widgets or embedded media, and it sets no cookies for those purposes.
2. Cookies and browser storage
You do not receive all of these items. Most are set only when you sign in or change a setting, and the analytics cookies only if you accept optional analytics.
| Name | Type | Category | Lifetime | Purpose | Set by |
|---|---|---|---|---|---|
| sentinel_known_browser | Cookie | Strictly necessary (Security) | 180 days, renewed at each sign-in | Holds a random value that lets us recognise a browser you have signed in from before, so that we can email you when a sign-in comes from a new browser. It does not sign you in. | Sentinel Connector API, when you sign in |
| sentinel_github_browser | Cookie | Strictly necessary (Authentication) | 5 minutes | Ties a GitHub sign-in to the browser that started it, so that another browser cannot complete it. | Sentinel Connector API, when you choose "Sign in with GitHub" |
| sentinel_github_handoff | Cookie | Strictly necessary (Authentication) | 1 minute | Carries a single-use code from the GitHub sign-in back to the application so that your session can start. | Sentinel Connector API, when GitHub returns you to the service |
| sentinel_google_browser | Cookie | Strictly necessary (Authentication) | 10 minutes | Ties a Google sign-in to the browser that started it, so that another browser cannot complete it. | Sentinel Connector API, when you choose "Sign in with Google" |
| sentinel_google_handoff | Cookie | Strictly necessary (Authentication) | 1 minute | Carries a single-use code from the Google sign-in back to the application so that your session can start. | Sentinel Connector API, when Google returns you to the service |
| sentinel_slack_install | Cookie | Strictly necessary (Security) | 5 minutes, or until the Slack connection completes | Ties a Slack workspace connection to the browser that started it, so that another browser cannot complete it. | Sentinel Connector API, when an organisation administrator starts connecting Slack |
| sentinel_idp | Cookie | Strictly necessary (Authentication) | Until sign-out or the configured session expiry; normally 12 hours | Keeps your central sign-in session so Sentinel products can sign you in without asking for your password again. It ends when you sign out or the session expires. | Sentinel Connector identity service, after sign-in |
| sentinel_idp_signin | Cookie | Strictly necessary (Authentication) | Up to 15 minutes, or until sign-in completes | Ties a central sign-in request to the browser that started it, so another browser cannot complete the request. | Sentinel Connector identity service, when a product starts sign-in |
| authToken | Session storage | Strictly necessary (Authentication) | Until you sign out or close the browser tab | Holds your session token so that you stay signed in while you use the dashboard. | Sentinel Connector web application, when you sign in |
| sentinel.dashboardSignIn | Session storage | Strictly necessary (Authentication) | Until sign-in completes, 15 minutes elapse, or you close the browser tab | Temporarily holds the state and proof needed to match your dashboard sign-in when you return from the identity service. It does not store an access or refresh token. | Sentinel Connector dashboard, while you sign in |
| sentinel.oidcSignIn | Session storage | Strictly necessary (Authentication) | Until sign-in completes, 15 minutes elapse, or you close the browser tab | Temporarily holds the state and proof needed to match your sign-in when you return from the identity service. It does not store an access or refresh token. | Sentinel Connector web application, while you sign in |
| sentinel.activeOrganization.v1:<account number> | Session storage | Strictly necessary (Interface preference you set) | Until you sign out or close the browser tab | Remembers which organisation you selected in the dashboard, so that each browser tab keeps showing the organisation you chose. | Sentinel Connector web application, when you select an organisation |
| sentinel.onboarding.planIntent.v1 | Session storage | Strictly necessary (Interface preference you set) | Until you close the browser tab | Holds the plan you picked before creating your account, so that the setup steps use the matching wording. It grants no access: what an account may create is decided by the server. | Sentinel Connector web application, when you choose a plan on the pricing page |
| sentinel.onboarding.siteStep.v1:<account number> | Session storage | Strictly necessary (Interface preference you set) | Until you add your first site, skip the step or close the browser tab | Remembers that the optional "add a site" step is still open for the organisation you have just created, so that reloading the page keeps you on it. | Sentinel Connector web application, when you create an organisation during setup |
| theme | Local storage | Strictly necessary (Interface preference you set) | Until you clear your browser storage | Remembers the light or dark theme you chose. It is written only when you change the theme. | Sentinel Connector web application, when you change the theme |
| palette | Local storage | Strictly necessary (Interface preference you set) | Until you clear your browser storage | Remembers the colour palette for the Site Overview updates strip. It is written when you change the palette, and when you sign in, with the palette saved on your account. | Sentinel Connector web application, when you change the colour palette or sign in |
| paletteUnsaved | Local storage | Strictly necessary (Interface preference you set) | Until the palette is saved to your account, or you clear your browser storage | Holds your account id while a colour palette choice has not yet been saved to your account, so it is saved again on your next visit instead of being replaced by the older saved choice. It is ignored, and removed, if a different account signs in. | Sentinel Connector web application, when you change the colour palette while signed in |
| sentinel.tour.v1:<account number> | Local storage | Strictly necessary (Interface preference you set) | Until you clear your browser storage | Remembers that you have seen or skipped the dashboard tour, so it is not shown again while the choice is being saved to your account. | Sentinel Connector web application, when you finish or skip the dashboard tour |
| sidebarCollapsed | Local storage | Strictly necessary (Interface preference you set) | Until you clear your browser storage | Remembers whether you collapsed the dashboard sidebar. It is written only when you collapse or expand it. | Sentinel Connector web application, when you collapse or expand the sidebar |
| siteOverviewStripView | Local storage | Strictly necessary (Interface preference you set) | Until you clear your browser storage | Remembers whether the 30-day strip on the dashboard shows update history or SLA history. It is written only when you switch between the two. | Sentinel Connector web application, when you switch the strip between Updates and SLA |
| messagesPopupSnoozed | Session storage | Strictly necessary (Interface preference you set) | Until you sign in again or close the browser tab | Remembers that you dismissed the critical messages popup without acknowledging it, so that it stays hidden for the rest of your session. It is written when you choose "Remind me later", close the popup, or follow a link from it. | Sentinel Connector web application, when you dismiss the critical messages popup |
| sentinel_analytics_consent_v1 | Local storage | Strictly necessary (Records your consent choice) | 6 months, after which we ask again | Records whether you accepted or rejected optional analytics, and when, so that we respect your choice and do not ask on every page. | Sentinel Connector web application, when you choose in the analytics notice |
| __stripe_mid | Cookie | Strictly necessary (Security) | 1 year | Fraud prevention for card payments: lets Stripe recognise the device across visits. It is set only after you open the card form in Billing. | Stripe, our payment provider, when you open the card form |
| __stripe_sid | Cookie | Strictly necessary (Security) | 30 minutes | Fraud prevention for card payments: identifies the current visit to Stripe. It is set only after you open the card form in Billing. | Stripe, our payment provider, when you open the card form |
| m | Cookie | Strictly necessary (Security) | 2 years | Fraud prevention for card payments. Stripe sets it on its own domain, m.stripe.com, not on the Service, only after you open the card form in Billing. | Stripe, our payment provider, on its own domain |
| _ga | Cookie | Analytics (Only with your consent) | 180 days without renewal, or until you reject analytics | Google Analytics cookie that tells one visitor from another when counting visits to public pages. We delete it when you reject or withdraw consent. | Google, only after you accept optional analytics |
| _ga_<property ID> | Cookie | Analytics (Only with your consent) | 180 days without renewal, or until you reject analytics | Google Analytics cookie that keeps the state of your visit for our analytics property. We delete it when you reject or withdraw consent. | Google, only after you accept optional analytics |
3. Requests to other companies
Pages of the Service load nothing from another company unless you agree. If you accept optional analytics, public pages make the request below, which discloses your IP address and browser details to that company.
www.googletagmanager.com(Google): Loads Google Tag Manager and Google Analytics to measure visits to public pages. It is requested only after you accept optional analytics, and it discloses your IP address and browser details to Google.
Payments
Payment is the one case where the Service contacts another company without the analytics choice applying. If an administrator adds a payment card, subscribes to a plan or opens an invoice in the dashboard, their browser contacts Stripe, our payment provider. This happens only after they choose that action, never on public pages and never when a page loads. Card details go to the provider directly and do not reach the Service. The provider sets the fraud-prevention cookies listed above.
js.stripe.com(Stripe): Loads the card form when you choose to add a payment card. Stripe receives your IP address and browser details.api.stripe.com(Stripe): Receives the card details you enter in the card form. They go to Stripe directly and never reach the Service.hooks.stripe.com(Stripe): Shows the confirmation step when your bank asks you to approve a card.merchant-ui-api.stripe.com(Stripe): Lets the card form check whether you have payment details saved with Stripe (Link).m.stripe.network(Stripe): Fraud prevention for the card form: collects signals about the device and browser.m.stripe.com(Stripe): Fraud prevention for the card form: receives the device signals and sets the "m" cookie.r.stripe.com(Stripe): Fraud prevention and error reporting for the card form.q.stripe.com(Stripe): Fraud prevention and error reporting for the card form.checkout.stripe.com(Stripe): Payment page, opened when you choose to subscribe to a plan.billing.stripe.com(Stripe): Billing portal, opened when you choose to edit your billing address or tax ID.invoice.stripe.com(Stripe): Invoice page, opened when you choose to view an invoice.pay.stripe.com(Stripe): Invoice PDF or receipt, opened when you choose to download one.
4. Signing in with another account
If you choose to sign in with one of the providers below, your browser goes to that provider's website. The provider may set its own cookies there under its own policy. Nothing is sent to a provider unless you choose it.
- Google (
accounts.google.com) - GitHub (
github.com)
5. Your choice
The first time you open a public page we ask whether you accept optional analytics. Rejecting is as easy as accepting, and nothing that is not strictly necessary runs until you have chosen. You can change your mind at any time with the "Analytics preferences" button on public pages. If you reject or withdraw, we delete the analytics cookies and stop loading Google's script. We ask again after six months.
Before we introduce any other cookie, storage or tool that is not strictly necessary, we will update this page and ask for your choice first.
6. Managing cookies in your browser
You can block or delete cookies and browser storage in your browser settings. If you block the items listed above, you will not be able to sign in. Deleting them signs you out and resets your interface settings.
7. Changes and contact
We update this page whenever the list above changes, and we revise the "Last updated" date. Our Privacy Policy explains how we handle personal information. Questions about this page can be sent to support@sentinelconnector.io.