Legal

Cookie Policy

Last updated: August 18, 2026

This Cookie Policy explains how SourceLoop, operated by BrightSumo Technologies ("SourceLoop", "we", "us"), uses cookies and similar technologies on sourceloop.ai. It sits alongside our Privacy Policy, which covers personal data more broadly.

One thing worth separating up front. This policy is about cookies on our own marketing website. It does not describe the SourceLoop Snippet that our customers install on their websites, which is covered in Section 7 of the Privacy Policy and in the Data Processing Addendum. If you are here because you saw a SourceLoop cookie on someone else's website, that section is the one you want.

1. What cookies are

A cookie is a small text file a website stores on your device. It lets a site remember things between page loads: that you are signed in, that you declined analytics, or that you arrived from a particular campaign. We also use local storage, which works similarly but holds more data and is not sent with every request.

First-party cookies are set by sourceloop.ai itself. Third-party cookies are set by another company whose script runs on our pages, such as Google. Both are listed below.

2. The categories we use

Strictly necessary. Needed for the site to load, stay secure, and remember your cookie choices. Switching these off would break the site, so they cannot be disabled. (No consent required.)
Analytics. Tell us which pages people read, which campaigns bring them, and where they drop off. We use our own first-party analytics alongside Google Analytics 4. Declining these does not affect anything you can do on the site. (Consent required in the EU, UK, and similar jurisdictions.)
Advertising. Let us measure whether an ad or an affiliate referral led to a signup. We use Google Ads conversion measurement and Affonso for affiliate attribution. We do not sell your personal information, and we do not run retargeting campaigns from this site. (Consent required in the EU, UK, and similar jurisdictions.)
Functional. Third-party embeds such as the demo scheduler, contact forms, and hosted video. These appear only on the pages carrying that feature, not site-wide. (Set only on pages that use the relevant feature.)

3. Every cookie we set

The table below is a snapshot of what sourceloop.ai loads at the date above. Names and lifetimes can change when a vendor updates their script, and the functional cookies appear only on the pages carrying that feature.

Cookie	Domain	Category	Expiry	Purpose
`sl_session`	sourceloop.ai	Strictly necessary	Session	Keeps your session consistent while you move between pages. Cannot be disabled.
`sl_consent`	sourceloop.ai	Strictly necessary	12 months	Records your cookie choices so we do not ask again on every visit, and so non-essential scripts stay off if you declined.
`__cf_bm, cf_clearance`	.sourceloop.ai	Strictly necessary	30 minutes to 12 months	Set by Cloudflare, which serves and protects this site. Distinguishes real visitors from automated traffic.
`sl_uid, sl_attr`	sourceloop.ai	Analytics	Up to 13 months	Our own first-party analytics. Stores an anonymous visitor identifier and the campaign, referrer, and landing page you arrived from, so we can see which marketing works. Set only after consent where consent is required.
`_ga, _ga_PNKRNH3S4L`	.sourceloop.ai	Analytics	13 months	Google Analytics 4. Measures page views, sessions, and aggregate site usage. Set only after consent where consent is required.
`_gcl_au`	.sourceloop.ai	Advertising	90 days	Google Ads conversion measurement. Records that an ad click led to a signup or demo request so we can measure campaign performance.
`affonso_referral`	sourceloop.ai	Advertising	Up to 12 months	Affonso, our affiliate platform. Records which affiliate referred you so the correct partner is credited if you subscribe.
`Cal.com booking cookies`	cal.com	Functional	Session to 12 months	Set only on pages with an embedded scheduler, such as /demo. Keeps your booking flow working.
`Tally form cookies`	tally.so	Functional	Session	Set only on pages with an embedded Tally form. Prevents duplicate submissions and preserves partial answers.
`Wistia video cookies`	wistia.com	Functional	Session to 24 months	Set only when a Wistia-hosted video is present. Remembers playback position and volume.

4. What we do not do

We think it is as useful to say what is absent as what is present:

We do not sell your personal information, and we do not share it for cross-context behavioural advertising as those terms are defined under the CCPA and CPRA;
We do not run retargeting or audience-building campaigns from cookies set on this website;
We do not use fingerprinting, session recording, or heat-mapping tools on this website;
We do not set third-party cookies in the browsers of your visitors through the SourceLoop Snippet. The Snippet is first-party only.

5. How to control cookies

5.1 Browser settings. Every major browser lets you block or delete cookies, and most let you block third-party cookies while keeping first-party ones. Blocking our analytics and advertising cookies will not stop you using any part of this site. Blocking strictly necessary cookies may break sign-in and forms.

5.2 Google Analytics. You can opt out of Google Analytics across all sites using Google's browser add-on.

5.3 Interest-based advertising. You can opt out of participating ad networks through the Network Advertising Initiative, the Digital Advertising Alliance, or Your Online Choices in the EU.

5.4 Do Not Track and Global Privacy Control. There is still no agreed standard for how sites should respond to Do Not Track, so this website does not act on DNT signals. We will revisit that if a standard settles.

6. Your rights

Depending on where you live, you may have the right to access, correct, delete, or port the personal data associated with these cookies, and to object to or restrict its processing. Under the CCPA and CPRA, California residents additionally have the right to know, to delete, to correct, to opt out of sale or sharing, and not to be discriminated against for exercising those rights.

Exercise any of these by emailing [email protected], or use the data deletion request form. Our full rights process is described in the Privacy Policy.

7. Changes to this policy

We update this policy when the cookies we set change, or when the law does. Material changes get a new "Last updated" date at the top. We keep the table in step with the scripts actually running on the site rather than describing an intention.

8. Contact

Questions about this policy, or about anything you have found in your browser that is not listed above, go to [email protected].