Cookie Policy

Effective 2026-01-01

1. What Are Cookies?

Cookies are small text files placed on your device when you visit a website. We use cookies and similar technologies (localStorage, sessionStorage) to make SaaS Starterwork and to understand how it’s used.

2. Categories of Cookies We Use

Essential cookies (always on)

Required for the site to function. These store your authentication session, your CSRF token, your theme preference, and your consent-banner choice itself. We cannot honour an opt-out for these without breaking the site.

refreshToken — your sign-in session (httpOnly, 7 days).
consent — your cookie-banner choice (httpOnly, 12 months).
cookie-consent-v1 — same choice mirrored to localStorage so the banner doesn’t reappear.

Analytics cookies (optional, off by default)

Help us understand which pages are used and where users get stuck. Only set if you click Accept all in the banner. You can change your mind at any time via Settings → Privacyor by clearing your browser’s cookies.

Marketing cookies (optional, off by default)

Used by ad networks if we run paid acquisition campaigns. Same opt-in rules as analytics.

3. Global Privacy Control

We honour the Global Privacy Control (GPC) browser signal. If your browser sends Sec-GPC: 1, we will:

not set any analytics or marketing cookies, regardless of any prior choice;
not show you the cookie banner;
treat the GPC signal as a binding opt-out under California CCPA / CPRA and the 19 other US state laws that recognise GPC.

4. How to Manage Cookies

You can change your consent at any time by visiting Settings → Privacy when signed in, or by clearing the cookie-consent-v1entry from your browser’s storage, which will re-trigger the banner on your next visit.

You can also block all cookies in your browser settings — note that this will sign you out and prevent you from signing back in.

5. Changes to This Policy

We’ll update this page if we add, remove, or change a cookie category. Material changes will be flagged in-app before they take effect.

6. Contact

Questions about cookies? Email privacy@example.com.