Cookie Policy
This Cookie Policy explains how B2 Group LLC uses cookies and similar local-storage technologies on salesfleet.ai. It supplements our Privacy Policy. Last updated: September 2026.
What are cookies & local storage?
Cookies are small text files stored on your device by your browser. “Local storage” is a similar browser mechanism for small amounts of data. Both let a website remember things between requests (for example, that you are signed in).
Our approach
We use two kinds of entries. Strictly necessary ones are required to run the service — to keep you signed in, protect against cross-site request forgery and remember your interface preferences; they are exempt from the prior-consent requirement, and that data never leaves our own servers. Optional analytics entries are set by Google Analytics and run only if you agree. We use no other advertising or profiling cookies.
How your consent works
Nothing from Google is loaded until you agree. Before you choose, this site makes no request to any Google server at all, so Google receives nothing about your visit — not even your IP address. That is stricter than the common practice of loading the tag immediately and merely switching cookies off, and it is what “Reject all” really does here. Your choice is stored on your device (not in an account), we ask again after 12 months, and you can change or withdraw it at any time. Withdrawing is one click, exactly like consenting, and it also deletes the analytics cookies already set. If your browser sends a Global Privacy Control signal, we treat that as a refusal and load nothing, without asking you again.
Cookies we set
| Name | Purpose | Type / lifetime |
|---|---|---|
laravel_session | Maintains your signed-in session and security state. | Necessary · session |
XSRF-TOKEN | Protects forms and API requests against cross-site request forgery (CSRF). | Necessary · session |
sf_cc | Remembers your cookie choice so we don’t ask again. | Necessary · ~365 days |
_ga | Google Analytics: distinguishes one browser from another so visits can be counted. Set only after you consent to Analytics. | Analytics · up to 2 years |
_ga_<id> | Google Analytics: keeps the state of the current session. Set only after you consent to Analytics. | Analytics · up to 2 years |
FPID | Google Analytics identifier set by our own tagging server rather than by a Google script. Set only after you consent to Analytics. | Analytics · up to 2 years |
FPLC | Short-lived value that keeps measurement consistent across our domains. Set only after you consent to Analytics. | Analytics · ~20 hours |
_gcl_au | Google Ads: records that a visit followed an advert, so a sign-up can be attributed to it. Set only after you consent to Marketing. | Marketing · ~90 days |
Analytics (Google Analytics 4)
With your consent we use Google Analytics 4, a service of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) and Google LLC (USA), by way of Google Tag Manager. We use it to understand how many people visit, which pages are useful and where visitors run into trouble — not to build advertising profiles of individuals. Legal basis: your consent, Art. 6(1)(a) GDPR and §25(1) TDDDG (Germany) / §165(3) TKG (Austria); you may withdraw it at any time with effect for the future.
Why our own server sits in the middle
We use server-side tagging: the measurement script is served from our own subdomain s.salesfleet.ai, on our own server in the EU, and measurement data goes there first instead of straight to Google. Your browser therefore only ever talks to us, and we decide what is passed on — we shorten your IP address before anything is forwarded, so Google does not receive your full IP. Server-side tagging does not remove the transfer to Google, and we do not claim that it does: once forwarded, the data is processed by Google under its own terms.
Transfer to the USA
If you consent to Analytics, personal data (such as an online identifier and a shortened IP address) is transferred to Google LLC in the United States, where authorities may under certain conditions access data held by US providers. The transfer is based on the European Commission’s adequacy decision for the EU–US Data Privacy Framework, in which Google LLC participates, together with EU Standard Contractual Clauses as an additional safeguard. If you would rather not accept that, choose “Reject all” — the site works exactly the same.
The signed-in application is never measured
Analytics runs on our public website only. The application itself (everything under /app), invitation links, and the visit pages your customers open from an e-mail carry no analytics at all, whatever you consented to on the website. The data our customers hold about their own clients is theirs, and we do not send it to third parties for our own measurement.
Local-storage entries we use
sf-theme— your light/dark theme preference.sf-cookie-consent— your cookie choice and the date it was made, so we can honour it and know when to ask again.sf_token— used only where a bearer token is needed instead of cookies (e.g. certain embedded contexts); not set during normal browser sign-in.
Managing cookies
You can change or withdraw your decision at any time using the Cookie settings link (also available in the footer). You can also block or delete cookies in your browser settings; note that blocking strictly necessary cookies may prevent you from signing in or using the service.
Changes
If we add a new non-essential cookie or a new recipient, we update this page and ask for your consent again before anything new is loaded — an existing consent never silently carries over to a new purpose.
Contact
Questions about cookies? Contact [email protected].