SiteFolio

Legal

Cookies

Last updated: 29 October 2026

SiteFolio uses a small set of essential cookies so you can stay signed in and so account actions are protected from cross-site request forgery (CSRF). We do not set advertising or retargeting cookies.

This page is the cookies notice for sitefolio.app. Related: Privacy Policy.

Essential cookies we set

  • SessionHttpOnly cookie with your Firebase session after sign-in. Typically lasts on the order of days (configured server-side), then you sign in again. Not readable by page JavaScript.
  • CSRF token (server)HttpOnly cookie used to verify that mutating requests (POST/PUT/PATCH/DELETE) originated from this app.
  • CSRF token (client)Non-HttpOnly companion to the server CSRF cookie. The browser reads it and sends the value in a request header so the server can validate the pair. It does not contain your email or CV.
  • Legacy auth cookieAn older auth cookie name is cleared on logout if still present. New sessions use the session cookie only.

Analytics (no cookies from us)

Production builds may load DataFast (cookieless script) and Vercel Web Analytics. Both measure page views without setting a first-party advertising cookie. They are not Google Analytics and we do not use them to build ad profiles.

Stripe Checkout, Google sign-in, and similar third-party flows may set their own cookies when you use those providers. Those are governed by their policies, not by this page alone.

What we do not set by default

  • No Google Analytics / Meta Pixel / ad retargeting cookies
  • No third-party marketing embed trackers on the landing page
  • No cross-site tracking identifiers invented by SiteFolio

Consent

Essential cookies above are required to operate sign-in and CSRF protection, so EU ePrivacy rules typically do not require a banner for them alone.

Optional cookie-gated marketing scripts are off in this deployment. No consent banner is shown for those scripts until optional non-essential cookies are turned on and gated tags are added.

Clearing cookies or signing out ends your session; you will need to sign in again.

Managing cookies

You can delete or block cookies in your browser settings. Blocking essential cookies will break sign-in and some form submissions. For requests about personal data more broadly, see the Privacy Policy.

Contact

Cookie questions: info@mail.sitefolio.app. Also Terms of Service.

Last updated 29 October 2026. This notice describes product behaviour; it is not legal advice.