Draft Document - Legal Review Required

This document is a draft and requires review by qualified legal counsel before publication. The content herein does not constitute legal advice.

Cookie Policy

Last Updated: February 25, 2026

v1.0

1. What Are Cookies?

Cookies are small text files placed on your device (computer, smartphone, tablet) when you visit our website. Cookies allow the website to recognize your device and remember information about your visit.

SafeReq primarily uses browser localStorage rather than traditional HTTP cookies to store preferences and session data on your device. Throughout this policy, we use the term "cookies" broadly to include localStorage, sessionStorage, and any other client-side storage mechanisms.

2. Categories of Cookies We Use

SafeReq organizes cookies into three categories. Essential cookies are always active because they are required for core platform functionality. Analytics and Functional cookies are opt-in and will not be activated unless you provide consent.

2.1 Essential Cookies (Always On)

These cookies are strictly necessary for the website to function. They cannot be disabled without breaking core platform features. Essential cookies include:

  • Authentication tokens: Access tokens held in memory and refresh tokens stored in HttpOnly cookies to maintain your login session
  • CSRF protection: Tokens that guard against cross-site request forgery attacks
  • Cookie consent preferences: A localStorage entry that records which cookie categories you have accepted or declined
  • Security headers: Session identifiers used for fraud prevention and rate limiting

Legal Basis: These cookies are necessary for providing the services you have requested and for the legitimate operation of the platform. They do not require your consent under CCPA/CPRA.

2.2 Analytics Cookies (Opt-In)

Analytics cookies help us understand how visitors interact with our website so we can improve the user experience. These cookies are only activated when you opt in through our cookie consent banner.

  • Tracking aggregate page views and navigation paths
  • Measuring feature usage and platform performance
  • Identifying technical issues (e.g., error rates by browser type)
  • Generating anonymized, aggregate statistics that do not identify individual users

Current status: SafeReq does not currently use any third-party analytics cookies or tracking pixels. If we introduce third-party analytics services in the future, this policy will be updated and you will be prompted to provide or update your consent.

Legal Basis: Your explicit consent, which can be withdrawn at any time.

2.3 Functional Cookies (Opt-In)

Functional cookies enable enhanced features and personalization. They are only activated when you opt in.

  • Remembering display preferences (e.g., theme, dashboard layout)
  • Storing analysis history preferences and filter settings
  • Persisting "Remember Me" login preference
  • Retaining form inputs across sessions for convenience

Legal Basis: Your explicit consent, which can be withdrawn at any time.

3. Storage Mechanisms

3.1 localStorage

SafeReq stores cookie consent preferences and functional settings in your browser's localStorage. Data in localStorage persists until you explicitly clear it through your browser settings or through our cookie management interface. localStorage data is only accessible to the SafeReq domain and is not transmitted to third parties.

3.2 HttpOnly Cookies

Refresh tokens are stored in HttpOnly, Secure cookies that cannot be accessed by client-side JavaScript. These cookies are transmitted only over HTTPS and are scoped to the SafeReq API domain.

3.3 Third-Party Cookies

SafeReq does not currently set any third-party tracking cookies. Our payment processor (Stripe) may set its own cookies during checkout sessions; these cookies are governed by Stripe's own privacy and cookie policies. SafeReq does not have access to or control over cookies set by Stripe.

4. Cookie Duration

The following table summarizes typical retention periods for data we store on your device:

Storage ItemCategoryDuration
Authentication refresh tokenEssential7 days
CSRF tokenEssentialSession (cleared on browser close)
Cookie consent preferencesEssential1 year
Display preferencesFunctionalUntil cleared by user
Aggregate usage metricsAnalytics90 days

5. Managing Your Cookie Preferences

5.1 Cookie Consent Banner

When you first visit SafeReq, a cookie consent banner will appear at the bottom of the page. You can choose to accept all cookies, decline non-essential cookies, or customize your preferences by category (Analytics and Functional). Essential cookies cannot be disabled as they are required for the platform to operate.

5.2 Updating Preferences at Any Time

You can change your cookie preferences at any time by clicking the "Manage Cookies" button in the website footer. This will re-open the cookie preferences panel where you can enable or disable Analytics and Functional cookies. Changes take effect immediately.

5.3 Browser Settings

You can also control cookies and local storage through your browser settings. Most browsers allow you to:

  • Block all cookies or third-party cookies
  • Clear existing cookies and site data
  • Clear localStorage for specific domains
  • Set your browser to notify you when a cookie is set

Learn how to manage cookies in popular browsers:

5.4 Do Not Track Signals

SafeReq honors Do Not Track (DNT) and Global Privacy Control (GPC) browser signals. When we detect either signal, we will not activate analytics cookies for your session, regardless of any prior consent you may have provided.

5.5 Impact of Disabling Cookies

If you choose to block or delete cookies and localStorage data, please be aware that:

  • You may need to log in each time you visit SafeReq
  • Your display preferences and dashboard settings may not persist
  • The cookie consent banner will reappear on your next visit
  • Core platform functionality (analysis, account management) will continue to work, but the experience may be less convenient

6. CCPA/CPRA Cookie Disclosures

Under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), California residents have specific rights regarding the collection and use of their personal information, including information collected through cookies and similar technologies.

6.1 No Sale or Sharing of Data

SafeReq does not sell your personal information. We do not share personal information collected through cookies with third parties for cross-context behavioral advertising. Because we do not sell or share personal information, there is no need to opt out of sale or sharing; however, you may still manage your cookie preferences as described in Section 5.

6.2 Categories of Information Collected via Cookies

The categories of personal information we may collect through cookies and similar technologies include:

  • Identifiers: Session tokens, device identifiers used for authentication
  • Internet activity: Browsing history within SafeReq, interaction data with platform features (only if analytics cookies are enabled)
  • Inferences: Preferences derived from your usage patterns (only if functional cookies are enabled)

6.3 Right to Know and Delete

California residents may request to know what personal information is collected through cookies or request its deletion. To exercise these rights, contact us at privacy@safereq.com or refer to our Privacy Policy for the full process. You may also delete cookie data stored on your device at any time by clearing your browser data or using the "Manage Cookies" button in the footer.

7. Updates to This Cookie Policy

We may update this Cookie Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will post the updated policy on this page with a revised "Last Updated" date.

If we introduce new categories of cookies or begin using third-party tracking technologies, we will notify you via the cookie consent banner and request your consent before activating any new non-essential cookies.

8. Contact Us

If you have questions about our use of cookies or this Cookie Policy, please contact us:

Email: privacy@safereq.com
Legal Inquiries: legal@safereq.com
Mail: SafeReq Inc., California, United States

This document is provided for informational purposes only and does not constitute legal advice. Please consult a licensed California employment attorney for legal guidance.