Cookie Policy

1. What cookies and local storage are

Cookies are small text files a site stores in your browser. Local storage is a similar browser mechanism that persists small values on your device. We use both, and we treat them under the same consent rules.

2. Categories we use

We group browser storage into three categories. Only the first is active before you make a choice.

• Strictly necessary — authentication session tokens issued by our managed auth provider, your saved cookie consent record, and security/anti-abuse values. These are required for the dashboard to function and cannot be switched off.
• Analytics — optional, consent-gated. Aggregated, de-identified product usage so we can see which dashboard views are used and where flows break.
• Marketing — optional, consent-gated, off by default. Campaign attribution for our own marketing pages.

3. Cookies in use today

Authentication session (necessary): set by our managed auth provider on sign-in, stored in local storage, refreshed on use and cleared on sign-out.

st_cookie_consent_v1 (necessary): records your consent choices and the timestamp so we do not ask again. Retained for 12 months.

Stripe checkout (necessary during payment): when you start checkout, Stripe sets its own cookies on the embedded checkout frame for fraud prevention and to complete the transaction. See Stripe's cookie and privacy notices for details.

No analytics or marketing cookies are loaded unless you opt in. If we add one, this page and the consent banner are updated before it is set.

4. Managing consent

The consent banner appears on your first visit. You can accept all, reject all non-essential storage, or choose per category. To change your decision later, use the "Cookie preferences" link in the site footer — your new choice replaces the stored record immediately.

You can also block or delete cookies in your browser settings. Blocking strictly necessary storage will sign you out and prevent the dashboard from working.

5. Do Not Track and Global Privacy Control

We do not use cross-site tracking, so there is nothing for a Do Not Track or Global Privacy Control signal to opt you out of. If we ever introduce advertising or sale/sharing of personal information, we will honour those signals as an opt-out.

6. Changes and contact

Material changes are posted here with a new effective date, and the consent banner is shown again when the categories change. Questions: cyberprosoftware@gmail.com.