Essential storage and optional analytics
Public-page analytics and advertising measurement are enabled by default unless you opt out or send a browser privacy signal. For visitors detected in the European Economic Area, United Kingdom or Türkiye, we ask before enabling tracking. When location is unknown, the default is opt-out. Advertising measurement remains separate from email marketing. Choosing “Allow analytics and ad measurement” enables our Google Tag Manager container and its configured advertising tags, such as LinkedIn. Reject / withdraw disables both choices; the page reloads to stop advertising scripts that have already loaded. The advertising preference is stored locally as citerep-advertising-consent.
CiteRep currently uses cookies and browser storage needed to provide the service. Optional advertising tags may set cookies when advertising measurement is enabled. When configured and permitted by your regional settings and choices, Google Analytics 4 and PostHog measure selected public-page visits and may record masked session replays. Private page contents, authentication forms and shared-link pages are excluded. Permitted completed signup and verified purchase events are measured separately from our server.
Authentication cookies
Signed, secure session cookies keep you signed in, protect authenticated requests, and remember the active workspace. Session cookies expire or are revoked when you sign out, reset your password, or an administrator revokes access.
Local application storage
The application stores a small cache of sites, recent reports, billing balances, interface state, and completion notifications in your browser. This makes navigation responsive. It is cleared on sign-out and can also be removed using your browser's site-data controls.
Referral attribution
When you follow a referral link, CiteRep stores a signed, HttpOnly referral cookie for up to 30 days. It connects a new signup and qualifying subscription to the person who recommended CiteRep. It does not enable analytics or email marketing, and is not sent to third-party analytics providers.
Payment provider storage
When you open Stripe Checkout or the Stripe customer portal, Stripe may use cookies under its own privacy and security policies to process payment and prevent fraud.
Your choices
Blocking essential storage may prevent sign-in or other core functions. Use the consent banner or Change privacy preferences on this page to control optional analytics. Once you choose, the banner disappears completely. Your choice is stored locally as citerep-analytics-consent. Google Analytics uses first-party _ga cookies when analytics is enabled. Meta Pixel measures public-page visits, product views and checkout starts for Facebook and Instagram ads, and may use _fbp and _fbc cookies when advertising measurement is enabled. It does not receive form values or run on private account or PDF delivery pages. Explicit opt-outs override regional defaults; we do not store a regional default as an affirmative consent choice. We store anonymous client/session identifiers and permitted campaign labels in citerep-conversion-context browser storage for up to 24 hours, and an HttpOnly citerep-measurement cookie for up to 24 hours to associate signups and Stripe purchases with that visit. Server conversion records are retained for up to seven days for delivery and duplicate protection. PostHog uses an anonymous visitor ID for PDF offer experiments. When analytics is permitted, citerep-offer-visitor keeps the same experiment assignment across visits for up to 90 days; citerep-analytics-choice mirrors your explicit analytics choice in a first-party cookie for up to 90 days so the server can respect it before rendering. We measure preview clicks, purchase-form interaction, checkout failures and verified purchases without recording email values. We do not identify anonymous visitors by name. Do Not Track and Global Privacy Control prevent tracking from loading. Withdrawing stops capture and replay. Clearing browser storage resets your choice.