Seoxpert.io
Legal

Cookie policy

Last updated: April 2026 · Effective immediately on publication.

Cookies are small files a website stores in your browser to remember things between visits. This page lists every cookie Seoxpert sets, what each one is for, how long it lasts, and how to change your consent.

1. Categories of cookies

We split cookies into three categories matching the consent banner:

  • Strictly necessary. Required for the site to function (signing in, remembering your consent choice). These are set without asking, because the GDPR allows them under the "essential" exemption (ePrivacy Directive Art. 5(3) and Cookiebekendtgørelsen).
  • Analytics. Help us understand how the site is used so we can improve it. Set only if you accept the analytics category in the cookie banner.
  • Marketing. Used for advertising and conversion tracking. We don't currently set any marketing cookies, but the category is reserved for future tools (e.g. retargeting). When that changes we will list them here and re-prompt for consent.

If you decline a category, the corresponding scripts are not loaded at all — we use the manageScriptTags integration of vanilla-cookieconsent so non-essential tags only run after acceptance.

2. The cookies we set

2.1 Strictly necessary

NamePurposeDuration
cc_cookieStores your cookie-consent choices so we don't prompt on every visit.6 months
sb-…-auth-tokenAuthenticates you to the dashboard. Set by Supabase when you sign in.Session / 1 hour refresh
sb-…-refresh-tokenLets the dashboard renew your session without forcing you to sign in again.Up to 30 days

2.2 Analytics (consent required)

If you accept analytics in the cookie banner, we load Google Analytics 4. Google sets the following cookies under the seoxpert.io domain:

NamePurposeDuration
_gaDistinguishes returning visitors so traffic stats are not double-counted.2 years
_ga_<property-id>Per-property GA4 session identifier.2 years

Google's privacy practices are documented at policies.google.com/privacy. If you decline analytics, none of these cookies are set and no GA scripts are loaded.

2.3 Marketing (consent required)

None today. The category is reserved for future tools (advertising pixels, conversion trackers). When we add anything in this category we will update this page, increment the consent revision so all visitors are re-prompted, and explicitly request consent for the new tools.

3. Managing your consent

You can change your cookie preferences at any time:

  • Click the Manage cookies link in the footer of any page.
  • Or open your browser's privacy settings and clear cookies for seoxpert.io. The next time you visit, the consent banner will appear again.

Withdrawing consent stops new tags from loading. Cookies set during a previous consent stay on your device until they expire or you delete them through the browser. If you want them removed immediately, clear them in your browser settings.

4. Consent audit log

Every accept, reject, or change is logged to our consent_events table along with a timestamp and a one-way hashed copy of your IP. We keep this record because the GDPR requires us to be able to demonstrate that consent was freely given. Hashes are produced with a salt that rotates daily; the original IP cannot be recovered from a hash. The hash and timestamp are kept for the lifetime of the consent record so the audit trail is intact.

5. Browser controls

Most browsers let you block, allow, or delete cookies independently of the consent banner. Documentation:

Blocking strictly-necessary cookies will break the site (you won't be able to sign in). Blocking analytics or marketing cookies has no impact on functionality.

6. Do Not Track and GPC

We respect the Global Privacy Control (GPC) signal — if your browser sends GPC, we treat it as a withdrawal of analytics and marketing consent. We don't honour the older "Do Not Track" header because the browser-vendor working group never agreed on a canonical interpretation; the consent banner is the authoritative mechanism.

7. Changes to this policy

If we add cookies, change durations, or change purposes, we will update this page and increment the consent revision so every visitor is prompted again. We log every revision change so we can prove who consented to which version.

8. More information

For broader detail about how we handle personal data, see the privacy policy. For company information and where to send legal notices, see the imprint. For privacy questions, contact support@seoxpert.io.

Cloud Ninja Consulting ApS · CVR 46044118 · VAT DK46044118 · Denmark.