2.Categories of cookies we use
Strictly necessary
Required to operate the Service. They enable core functionality such as authentication, session management, security, your cookie choices and requested campaign offers. You cannot opt out of these without breaking the Service.
Functional
Remember choices you make - such as your language preference and whether the application sidebar is expanded - so the interface behaves consistently between visits.
Analytics
Help us understand how our public marketing pages are used so we can improve them. These include first-party visit measurement, acquisition attribution and Google tags managed through Google Tag Manager. Optional tracking loads only after you accept analytics.
Advertising
Advertising storage, advertising user data and personalised advertising consent are denied when Google Tag Manager loads. Accepting analytics does not grant advertising consent.
3.Examples of cookies we set
| Name | Purpose | Category | Duration |
|---|---|---|---|
| citations_cookie_consent | Remembers your optional cookie choices (localStorage) | Strictly necessary | 180 days |
| citations_attribution | Acquisition source after analytics consent; requested offer codes and claim tokens can be retained without analytics (localStorage) | Analytics / necessary for requested offers | Until cleared |
| _ga, _ga_* | Google Analytics identifiers, if configured through Google Tag Manager | Analytics | Up to 2 years, depending on tag configuration |
| sb-<project>-auth-token | Authenticated session and token refresh | Strictly necessary | Session / until sign-out |
| locale_pref | Remembers your chosen language | Functional | 1 year |
| sidebar_state | Remembers whether the app sidebar is expanded | Functional | 7 days |
| lv_vid | First-party visitor identifier used to count page views on public marketing pages | Analytics | 1 year |
| lv_sid | Groups page views into a visit; lv_sid_last records activity time (sessionStorage) | Analytics | Until the tab is closed |
4.Your consent
Optional analytics are off until you choose to accept them. You can reject optional cookies as easily as accepting them, or use Preferences to review the categories. Essential storage remains available so sign-in and requested services continue to work.
Use Cookie settings in the website footer to change or withdraw your choice at any time. Choices last 180 days. Withdrawal clears known analytics identifiers and reloads the page to stop already loaded Google tags. You can also use your browser controls or email privacy@citations.io to object to analytics measurement. Blocking analytics storage does not affect your access to the Service.
5.Do Not Track and Global Privacy Control
We honour Do Not Track (DNT) and Global Privacy Control (GPC): when either signal is enabled, optional analytics stay off, even if you previously accepted them. We do not create analytics identifiers, record marketing page views or load Google Tag Manager for that visit.
6.Browser controls
- Most browsers let you block or delete cookies via their settings (e.g. Chrome: Settings → Privacy and security).
- Mobile devices include similar settings under Privacy.
- Blocking strictly necessary cookies will break authentication and other core functionality.
7.Changes
We will update this policy if we change the cookies we use. The "Last updated" date at the top indicates the current version. Questions: privacy@citations.io.
Write to privacy@citations.io and we will respond within 30 days, or sooner where required by law.

