Cookie Policy
1. About this policy
This Cookie Policy explains how Voxgrid Inc (“sip.io”, “we”, “us”) uses cookies and similar technologies on sip.io, our documentation, our status page at status.sipio.dev, the customer console and web app, and the browser-based webphone (together, the “Sites”). It should be read with our Privacy Policy.
2. What cookies and similar technologies are
Cookies are small text files that a website places in your browser. “Similar technologies” include browser local storage, session storage, IndexedDB and scripts that collect information about your device or browser. In this policy we refer to all of these as “cookies” unless the difference matters.
Cookies can be first-party (set by the Site you are visiting) or third-party (set by another provider, such as a bot-check service). They can be session cookies, which are deleted when you close your browser, or persistent cookies, which remain until they expire or you delete them.
3. Categories of cookies we use
3.1 Strictly necessary
These cookies are needed for the Sites to work and to keep them secure. They cannot be switched off in our consent tool, but you can block them in your browser, in which case parts of the Sites will not work. Under EU, UK and similar laws they do not require consent. They support:
- Session and authentication: keeping you signed in to the console and API explorer, and protecting your session.
- CSRF protection: preventing cross-site request forgery on forms and console actions.
- Load balancing and routing: directing your requests to a healthy server.
- Bot management and security: Cloudflare Turnstile and Cloudflare’s security services check that a visitor is human and protect the Sites from abuse, credential stuffing and denial-of-service attacks. Cloudflare may set cookies and run a script that evaluates browser signals for this purpose.
- Consent record: remembering your cookie choices.
3.2 Preferences
These remember choices you make, such as interface theme, language, time zone, table layouts and dismissed notices. If you decline them, the Sites will still work but will not remember your settings between visits. Where required by law we ask for consent before setting them.
3.3 Analytics
With your consent, we use Google Analytics 4, in Google Consent Mode with analytics storage denied by default, to understand how visitors use the Sites, for example which documentation pages are most read and where errors occur. We configure analytics to minimise data collected (for example by truncating IP addresses where the provider supports it) and we do not use analytics data to identify individuals. Analytics cookies are not set unless you opt in.
3.4 Advertising
We do not use advertising or cross-site tracking cookies on the Sites. If that changes, we will update this policy and ask for your consent before setting any such cookies.
4. Cookie table
The names below are indicative. Exact names may change as we update the Sites; this table will be updated when the category, purpose or duration changes.
| Cookie / key | Provider | Category | Purpose | Duration |
|---|---|---|---|---|
| Console session cookie | sip.io | Strictly necessary | Keeps you signed in to the console (when the console launches) | Session, or up to 30 days if “remember me” is selected |
| Console request-forgery token | sip.io | Strictly necessary | Protects forms and console actions against cross-site request forgery | Session |
sipio-cookie-consent (local storage) | sip.io | Strictly necessary | Records your cookie choice (“Essential only” or “Accept all”) | Until you clear it or change your choice |
__cf_bm | Cloudflare | Strictly necessary | Bot management; distinguishes humans from automated traffic | 30 minutes |
cf_clearance | Cloudflare | Strictly necessary | Records that a security or Turnstile challenge was passed | Up to 1 year, depending on configuration |
| Turnstile challenge data | Cloudflare | Strictly necessary | Bot check on sign-up, sign-in and contact forms | Session |
starlight-theme (local storage) | sip.io | Preferences | Remembers your light or dark theme on the website and docs | Until you clear it |
_ga, _ga_<container-id> | Google Analytics | Analytics (consent only) | Measures page views and navigation | Up to 13 months (set only after “Accept all”) |
5. Local storage in the console and webphone
The console and webphone are web applications that use browser storage to function:
- Console: local and session storage hold interface state (open tabs, filters, draft forms), cached non-sensitive reference data to make pages load faster, and short-lived tokens needed to call our API from your browser. These are strictly necessary for the console to work.
- Webphone: the webphone stores its SIP registration settings, selected audio input and output devices, call history shown in the interface, and the WebSocket (WSS) connection state. It may request access to your microphone through your browser’s permission prompt; we do not access your microphone or camera without that permission. Call audio is transmitted to our servers and is not stored in your browser.
- Status page: if you subscribe to updates, your email address is stored on our servers, not in a cookie; the status page itself uses only strictly necessary cookies.
You can clear this storage at any time through your browser settings. Doing so will sign you out and reset your preferences and webphone settings.
6. Consent and withdrawal
When you first visit a Site from a location where consent is required, we show a banner that lets you accept all cookies, reject non-essential cookies, or choose by category. Rejecting is as easy as accepting. Non-essential cookies are not set until you opt in.
You can change your mind at any time by using the “Cookie settings” link in the footer of the Sites. Withdrawing consent stops future use of the relevant cookies; we will delete or expire cookies we control, but cookies already set by third parties may need to be cleared in your browser.
We honour the Global Privacy Control signal as a request to opt out of non-essential cookies where the law requires it.
7. How to control cookies in your browser
Most browsers let you view, block and delete cookies and site data, and some let you block third-party cookies only. The settings are usually under “Privacy” or “Site data”. If you block strictly necessary cookies, you may not be able to sign in or use the console or webphone.
8. Changes
We may update this policy when we change the cookies we use. Material changes are recorded in our Legal Changelog, and where they affect cookies that need consent, we will ask for your consent again.
9. Contact
Questions about this policy can be sent to privacy@sip.io.