Cookie Policy — CopilotSEO

1. What Are Cookies?

Cookies are small text files placed on your device when you visit a website. This Cookie Policy explains what cookies we use on copilotseo.io and why we use them.

2. What Cookies We Use

We use only strictly necessary cookies required to operate the Service. We do not use advertising cookies, analytics cookies, or any third-party tracking cookies.

Cookie	Purpose	Duration
`session_token`	Authenticates and maintains your login session	Session / 30 days
`csrf_token`	Protects against cross-site request forgery attacks	Session
`auth_state`	Used during Google OAuth login flow	Session (~5 min)
`cookie_consent`	Stores your cookie consent preference	1 year

These cookies are essential for the Service to function. The Service cannot operate without them.

3. What We Do NOT Use

Advertising or retargeting cookies
Analytics cookies (we do not use Google Analytics or any analytics platform)
Social media tracking pixels (no Facebook Pixel, Twitter/X pixels, LinkedIn tags)
Browser fingerprinting
Any third-party tracking technologies

4. Google OAuth Cookies

When you authenticate via Google, Google may set its own cookies as part of the OAuth login flow. These cookies are governed by Google's Privacy Policy and are outside our control.

5. Stripe Cookies

When you access billing or checkout pages, Stripe (our payment processor) may set cookies for fraud prevention. These are governed by Stripe's Privacy Policy.

6. Local Storage

We use browser local storage to save your application preferences (such as your last selected website and dashboard settings). This data never leaves your browser and is not transmitted to our servers.

7. Your Cookie Choices

Browser settings: You can control and delete cookies through your browser settings. Please note that disabling strictly necessary cookies will prevent you from logging in and using the Service.

Do Not Track (DNT): We honor DNT browser signals. When a DNT signal is detected, we do not load any optional scripts or tracking.

Global Privacy Control (GPC): We recognize and honor GPC signals as a "Do Not Sell or Share" request under applicable privacy law.

Since we only use strictly necessary cookies, there is no cookie consent banner required — these cookies cannot be disabled without breaking the Service.

8. Changes to This Policy

We will update this Cookie Policy if we change the cookies we use. We will update the "Last updated" date and notify you of any material changes.

9. Contact Us

CopilotSEO
Ontario, Canada
Email: support@copilotseo.io
Response time: Within 2 business days