Legal
Cookie Policy.
Most of this site sets no cookies at all. This page is short because there is little to disclose — and it says exactly what the little is.
Cookie Policy
Our stance on cookies.
SageTensor uses no analytics, no advertising technology, and no cross-site tracking. We do not profile visitors, and we do not sell or share your information. The only browser storage we rely on is a single, strictly-necessary session cookie — and it is set only if you choose to begin a mandate.
While you browse.
- Reading the site sets no cookies and no other browser storage.
- Fonts are served from this site; no third-party services are contacted as you read.
- A small script may add a marker to the page to enable subtle animation. It stores nothing about you and respects a reduced-motion preference.
- Standard server request logs may exist at the hosting layer for security and reliability; they are not used to profile you.
The one cookie.
When you start the Define a mandate flow — or the RFP, NDA-first, or inquiry routes — a single first-party session cookie is set so the steps remember what you entered as you move between them. It holds only an opaque session identifier; your entries are kept server-side for a short time. It is not used for analytics or tracking, it is marked HttpOnly and Secure, and no cookie is set unless you begin a mandate.
The security challenge.
The mandate pages load Cloudflare Turnstile, a privacy-respecting alternative to CAPTCHAs, to tell people apart from automated abuse. Only on those pages, Cloudflare receives the challenge interaction and your IP address to return a verification result, and Cloudflare — as our infrastructure provider — may set strictly-necessary security cookies to operate that check. If you have JavaScript disabled the form still works; the submission is simply flagged for a person to review.
The cookies at a glance.
| Name | Provider | Purpose | Duration | Category |
|---|---|---|---|---|
| astro-session | SageTensor (first-party) | Remembers your place across the steps of the mandate flow. Holds only an opaque session identifier; your entries are kept server-side for a short time. | Session (expires shortly after you stop; cleared on completion) | Strictly necessary — set only if you begin a mandate |
| __cf_bm and related cf_ cookies | Cloudflare (infrastructure provider) | May be set to tell people apart from automated abuse and to operate the human-verification challenge on the mandate pages. | Up to about 30 minutes | Strictly necessary — security |
Why there is no consent banner.
Under the EU/UK ePrivacy rules, consent is required for cookies that are not strictly necessary — analytics, advertising, and tracking. We use none of those. The only cookies involved are strictly necessary to deliver a function you asked for (submitting a mandate) or to keep the service secure, and those are exempt from the consent requirement. Rather than interrupt you with a banner that asks permission for nothing, we simply do not track you.
Your controls.
You can block or delete cookies in your browser settings at any time. Because the session cookie is strictly necessary for the mandate flow, blocking it may stop that flow from working; the rest of the site is unaffected. We honour a Global Privacy Control or Do Not Track signal by design — there is no tracking for it to switch off.
Contact.
Questions about cookies or this policy can be sent to privacy@sagetensor.com. The wider picture is set out in the Privacy Policy .