Back to Citerex

Cookie Policy

Last updated: [SET TO DEPLOYMENT DATE]

1. What Are Cookies

Cookies are small text files that websites store on your device when you visit them. Similar technologies include local storage, session storage, and tracking pixels. We use these to operate Citerex, remember your preferences, and analyze how the Service is used.

2. Types of Cookies We Use

2.1 Strictly Necessary Cookies

Required for the Service to function. These include authentication cookies (Supabase session tokens), CSRF protection tokens, and load-balancing cookies. You cannot opt out of these — without them, the Service does not work. Legal basis: legitimate interest (necessary for service delivery).

2.2 Functional Cookies

Remember your preferences (theme, language, dashboard settings). Without these, you would need to reset preferences on every visit. Legal basis: legitimate interest.

2.3 Analytics Cookies

Help us understand how the Service is used so we can improve it. Currently used: Vercel Analytics (anonymous performance data) and our internal visitor tracking (page visits, click events, anonymized usage patterns). Legal basis: consent (EU/UK users) / opt-out (US/India users). [ATTORNEY REVIEW REQUIRED: GDPR requires explicit consent before non-essential cookies are set. Verify a consent banner is implemented before depending on this category.]

2.4 Third-Party Cookies

Cookies set by services we integrate with: Stripe (payment processing), Razorpay (payment processing), Google (when you sign in via Google OAuth), and our payment partners. These are governed by each provider's respective privacy policy.

3. How to Manage Cookies

You can control cookies through your browser settings. Most browsers let you: view cookies that have been set, block cookies (or block specific categories), delete cookies, and configure prompts before cookies are set.

Browser-specific instructions: Chrome, Firefox, Safari, Edge.

Note: blocking strictly necessary cookies will break Service functionality.

4. Do Not Track

Our Service does not currently respond to Do Not Track signals as there is no consistent industry standard for compliance. We instead rely on cookie management settings as the primary control mechanism.

5. Updates

We may update this Cookie Policy as our practices change. Material changes will be notified to active users by email at least 30 days before taking effect. The “Last updated” date reflects the most recent revision.

6. Contact

Questions: privacy@citerex.com.

This document requires legal review before publishing. Bracketed placeholders must be replaced with your specific values. Verify a cookie consent banner is implemented before relying on consent-based legal bases.