Cookie Notice
What this covers
This notice covers cookies and equivalent browser storage — including local storage and session storage — set by sageofwar.com and its subdomains.
Cookies and storage we set
One, and only when you sign in. The public pages of sageofwar.com set no cookies and use no browser storage of any kind. The Sage of War app sets a single strictly-necessary cookie when you sign in, so that you stay signed in. It is listed below.
| Name | Set by | Purpose | Lifetime | Type |
|---|---|---|---|---|
__Host-sow_session |
Sage of War (first-party), on the app only | Keeps you signed in: it holds your sign-in session. Strictly necessary. | 30 days, or until you sign out | First-party; HttpOnly (no script on the page can read it); Secure (sent only over HTTPS) |
That is a statement about what is deployed today, not a promise about the future. The public pages still have no accounts, no forms and no scripts. Sign-in lives in the app, and the cookie above is the only one it sets: it is not used for advertising or analytics, and it is never shared with anyone. When checkout goes live, any further strictly-necessary cookie it needs will be listed in the table above — with name, purpose and lifetime — before that feature is available to you, not after.
What we do not set
We set no advertising cookies and no analytics cookies. We use no third-party trackers, no advertising pixels and no session-recording tools.
We also make no third-party requests at all. Every file this site loads comes from sageofwar.com itself — no font service, no analytics provider, no other company's domain. Like every website, our pages reach you through our hosting provider's network: Render delivers them over its content delivery network, which runs on Cloudflare, and that network necessarily sees your IP address in order to deliver the page. It sets no cookies. The typeface is served from this domain under its open licence rather than from a font host, specifically so that visiting this page does not disclose your IP address to anyone other than our hosting provider.
How we know that, and how you can check it
On 2026-09-19 we enumerated, in a browser, every network request this site makes and every storage entry it sets. The request list contained exactly one host: our own. The storage lists were empty — no cookies, no local storage, no session storage. The self-hosted typeface was confirmed as loading from this domain at runtime, not merely written that way.
That measurement was taken twice on that date — immediately before and immediately after we moved this domain's DNS to a new provider — and the two results were identical. We check across changes to our own infrastructure, not only across changes to the page.
You can reproduce both checks in about ten seconds. Open your browser's developer tools, load this page with the Network panel recording, and read the list of hosts. Then check Application or Storage for cookies and local storage. If what you see disagrees with this notice, the notice is wrong and we want to hear about it — the contact address is below.
What that check covered, stated plainly: the pages published on that date. As we add pages — pricing, our legal documents, sign-up, the advisor itself, checkout, and our error pages — each one is checked the same way before it ships, and any page that has not been checked is outside the claim above rather than covered by it.
Why there is no cookie banner
A consent banner exists to obtain permission for non-essential storage. We set none, so there is nothing to ask permission for. Strictly-necessary storage — the kind that keeps you signed in — does not require consent, but it does require disclosure, which is what the table above is for.
If that ever changes, the consent mechanism ships with the change, not after it.
Your browser controls
Blocking or clearing cookies has no effect on the public pages of this site. In the app, blocking the sign-in cookie means you cannot stay signed in, and clearing it signs you out; it will not delete your account or your credits. Every major browser lets you block or delete cookies and site data per site, in its privacy settings.
When this notice changes
The statements above are re-verified before each release — not on a schedule, because a date passes whether or not anything changed, and a release does not.
Three things make the central statement false immediately, and any one of them requires this notice to be updated in the same release that causes it:
- any third-party request — a script, style, font, image, embed or pixel loading from a domain other than sageofwar.com
- any cookie or browser-storage entry being set, including by our hosting or network providers
- a page shipping without both checks having been run on it — because the claim is about the site, not about one page of it
The one expected future exception is our payment provider, on the checkout step only. When checkout goes live, its cookies will be listed in the table above as strictly necessary, and it will remain the only third party that receives a request from this site.
Contact
Questions, or a disagreement with anything above: privacy@sageofwar.com
This notice forms part of our Privacy Policy.