Cookie Policy

What we set

Name	Purpose	Lifetime
closerev_session	Keeps you signed in. httpOnly, Secure, SameSite=Lax	30 days, or until you log out
g_state, g_verifier	Protects the "Sign in with Google" flow against cross-site request forgery. Only set if you start that flow	10 minutes

Local storage

We store one preference in your browser's local storage, closerev-theme, so the site remembers whether you chose light or dark mode. It never leaves your device and isn't a cookie.

What we don't set

• No advertising or retargeting cookies.
• No third-party marketing pixels.
• No session recording or heatmap tools.
• No cross-site tracking of any kind.

Analytics

We measure page traffic two ways. Cookie-free, privacy-preserving analytics run on every visit; they set no identifiers and build no profiles of individuals. In addition we use Google Analytics, which does set cookies — so it runs only if you accept when asked. Until you do, the tag is loaded with storage denied, meaning no analytics cookie is written at all. Declining costs you nothing: the site behaves identically either way.

Google Analytics cookies (_ga and _ga_<id>) last up to two years and record which pages are visited and roughly where visitors come from. They are never used for advertising: advertising, ad-personalisation and ad-user-data storage are all denied outright, and we do not run Google Ads remarketing. Google Analytics is not loaded on any signed-in page — your workspace, imports and customer records are never sent to it.

To change your mind at any time, use Your privacy choices — linked in the footer of every page — or the same switches in Settings if you have an account. Withdrawing consent is deliberately no harder than giving it. You can also install Google's opt-out add-on, or use your browser's Do Not Track / Global Privacy Control signal, which we honour.

Managing cookies

You can clear or block cookies in your browser settings. Blocking the session cookie will stop you being able to stay signed in, since that's the cookie's only job.

Categories

Category	What it does	Who receives data	Your choice
Strictly necessary	Signing in, security, and remembering your light/dark choice	No one — first-party only	Always on; the site cannot work without them
Analytics	Which pages are visited and roughly where visitors arrive from, in aggregate	Google Analytics	Off unless you accept
Advertising	Measuring which ads bring people here, and showing CloseRev ads to people who visited	Google Ads, Meta, LinkedIn	Off unless you accept; also off automatically if your browser sends a Global Privacy Control signal

Advertising is the only category that shares data with other companies. Nothing in it is loaded on signed-in pages, so your workspace, imports and customer records are never exposed to it.

Changes

We said we would add a consent mechanism before introducing any non-essential cookie, and we did: Google Analytics was added together with the prompt that gates it. That promise still stands for anything we add in future. Questions: privacy@closerev.com.