Cookie Policy

1. What cookies are

Cookies are small text files placed on your device when you visit a website. Some are essential for the site to work; others are optional and only set with your consent. We also use similar technologies such as browser local storage to keep you signed in and to remember your preferences. In this policy, "cookies" refers to all of these technologies.

2. The categories we use

Strictly necessary: required for the site to function, such as authentication, keeping you securely signed in, security, and remembering your cookie choices. These are always on and cannot be switched off.

Analytics (optional): only if you switch them on. We use PostHog to see which pages are used and where people get stuck, so we can fix them. It is off until you accept analytics, and switching it off again stops it straight away. We never record your screen or keystrokes.

Marketing (optional): used to measure campaigns and personalise content. Only set if you accept them.

3. Cookies and technologies we rely on

Authentication & session (strictly necessary): set by our authentication provider (Supabase) and stored in your browser to keep you securely signed in.

Cookie preferences (strictly necessary): we store your consent choices in your browser, and in a small first-party cookie shared by citeon.dev and app.citeon.dev, so we don't ask again on every visit or when you move between the two.

Checkout (strictly necessary at the point of payment): our payment provider, Stripe, sets cookies on its own checkout page (checkout.stripe.com) that are needed to process a payment securely and prevent fraud.

Analytics (optional, only with your consent): PostHog (PostHog Inc., United States) stores a random identifier in a cookie and your browser's local storage so visits can be counted and the sign-up steps understood. If you have an account, it is linked to your account id, never your email. Requests go through our own domain. Cloudflare Web Analytics also counts page views without cookies, and follows the same choice.

4. Managing your preferences

When you first visit, a banner lets you accept all, decline non-essential cookies, or customise by category. You can change your choice at any time with the "Cookie settings" link at the bottom of every page. You can also block or delete cookies in your browser settings. Note that strictly necessary cookies are required for the site to function, so disabling them may break sign-in.

5. Third-party cookies

Some cookies are set by trusted third parties we use to operate Citeon, such as Supabase (authentication) and Stripe (payments). These providers process data under their own terms. See our Privacy Policy for more on how we handle personal data and the sub-processors we use.

6. Do Not Track

Some browsers offer a "Do Not Track" signal. Because there is no agreed industry standard for how to respond to it, we currently do not change our behaviour based on these signals. Instead, you control non-essential cookies through the banner described above.

7. Changes to this policy

We may update this Cookie Policy as the product and applicable laws change. We will revise the "last updated" date above whenever we do.

8. Contact

Questions about how we use cookies? Email us at support@citeon.dev.