Cookie Policy - CiteSpark

Effective Date: October 12, 2025
Last Updated: October 12, 2025

1. Introduction

This Cookie Policy explains how CiteSpark ("we", "our", "us") uses cookies and similar technologies when you use our Service at citespark.com.

Good News: We use minimal cookies. We do NOT use advertising or cross-site tracking cookies. On public pages, we may use Google Analytics 4 (GA4) solely for aggregate analytics; GA4 honors the browser's Do Not Track (DNT) setting and is configured without advertising features.

2. What Are Cookies?

Cookies are small text files stored on your device (computer, tablet, or mobile) when you visit a website. They help websites remember your preferences and improve your experience.

Types of Cookies:
- Session Cookies - Deleted when you close your browser
- Persistent Cookies - Remain until they expire or you delete them
- First-Party Cookies - Set by the website you're visiting
- Third-Party Cookies - Set by external services

3. How We Use Cookies

3.1 Strictly Necessary Cookies (Essential)

These cookies are essential for the Service to function. Without them, you cannot use the Service.

Cookie Name	Purpose	Duration	Type
`auth_token`	Authenticates your session	Session	First-party
`user_id`	Identifies your account	Session	First-party
`csrf_token`	Prevents cross-site request forgery	Session	First-party
`session_id`	Maintains your login session	7 days	First-party

Legal Basis: These cookies are necessary for contract performance (GDPR Art. 6(1)(b)) and do not require consent.

3.2 Firebase Authentication Cookies (Third-Party)

We use Google Firebase for authentication. Firebase may set the following cookies:

Cookie Name	Purpose	Duration	Provider
`__Secure-*`	Secure authentication tokens	Varies	Google/Firebase
`__Host-*`	Authentication state	Varies	Google/Firebase

These are essential for login functionality.

Learn more: Firebase Cookie Usage

3.3 Functional Cookies (If Applicable)

Currently, we do NOT use functional cookies. If we add them in the future (e.g., language preferences, theme settings), we will:
- Update this policy
- Request your consent if required
- Provide easy opt-out options

3.4 Cookies We DO NOT Use

✗ Advertising Cookies - We don't serve ads
✗ Cross-Site Tracking Cookies - We don't track you across sites
✗ Third-Party Marketing Cookies - No marketing tracking
✗ Social Media Cookies - No social media integrations (yet)

3.5 Google Analytics 4 (Public Pages Only)

We use Google Analytics 4 on publicly accessible pages to measure aggregate usage (e.g., page views). GA4 may set first-party cookies for measurement. We disable advertising features and do not use GA for cross-site tracking. If your browser's Do Not Track (DNT) is enabled, GA4 is not loaded.

4. Other Tracking Technologies

4.1 Local Storage

We use browser local storage to:
- Remember your preference for dismissing notices (e.g., beta popup)
- Cache certain UI preferences (theme, layout)

Local storage is NOT used for tracking or advertising.

4.2 Analytics

We use privacy-first analytics. For authenticated areas, we do not set analytics cookies. On public pages, GA4 may set first-party measurement cookies as described above. See our Privacy Policy for details.

5. Third-Party Services

5.1 Google OAuth

If you sign in with Google, Google may set cookies according to their cookie policy. We do not control these cookies.

Google's Cookie Policy: https://policies.google.com/technologies/cookies

5.2 Google Cloud Platform

Our Service is hosted on Google Cloud Platform. Google may use cookies for:
- Load balancing
- Security
- Service delivery

These are necessary technical cookies.

6. Your Cookie Choices

6.1 Browser Settings

You can control cookies through your browser settings:

Google Chrome:
1. Settings → Privacy and security → Cookies and other site data
2. Choose your preferred cookie settings
3. Manage exceptions for specific sites

Mozilla Firefox:
1. Settings → Privacy & Security → Cookies and Site Data
2. Select your cookie preferences
3. Manage individual site permissions

Safari:
1. Preferences → Privacy
2. Manage cookies and website data
3. Configure tracking prevention

Microsoft Edge:
1. Settings → Cookies and site permissions
2. Manage and delete cookies
3. Configure tracking prevention

6.2 Delete Cookies

You can delete existing cookies through your browser:
- All cookies: Browser settings → Clear browsing data
- Specific cookies: Browser settings → Site data management

Warning: Deleting essential cookies will log you out and may affect Service functionality.

6.3 Do Not Track (DNT)

We respect the "Do Not Track" browser setting for public page analytics:
- When DNT is enabled, we do not track your visits to public pages
- DNT does not affect essential authentication cookies (necessary for Service)

Enable DNT: Check your browser's privacy settings

7. Cookie Consent

7.1 Essential Cookies

Essential cookies do not require consent under GDPR (necessary for service delivery). They are automatically enabled when you use the Service.

7.2 Optional Cookies

If we introduce optional cookies in the future, we will:
- Ask for your explicit consent before setting them
- Provide clear information about their purpose
- Allow you to withdraw consent at any time
- Respect your choices

7.3 Consent Management

Currently, we only use essential cookies, so no consent banner is required. If this changes, we will implement a consent management system that:
- Allows you to accept or reject optional cookies
- Remembers your preferences
- Provides easy access to modify your choices
- Complies with GDPR and ePrivacy Directive

8. Updates to This Cookie Policy

We may update this Cookie Policy from time to time to reflect:
- Changes to our use of cookies
- New features or functionality
- Changes in cookie laws or regulations
- User feedback

When we make changes:
- We will update the "Last Updated" date
- Material changes will be communicated via email or notice
- Continued use of the Service constitutes acceptance

9. GDPR & CCPA Compliance

9.1 GDPR (EU/EEA/UK)

Our cookie practices comply with:
- GDPR (General Data Protection Regulation)
- ePrivacy Directive (Cookie Law)
- UK GDPR and UK PECR

Key Principles:
- Only essential cookies without consent
- Clear information about cookie use
- Easy cookie management options
- Respect for user privacy

9.2 CCPA (California)

Under CCPA, cookies may be considered "personal information" if they can identify you. Our practices:
- We do not "sell" cookie data (we don't sell any data)
- Essential cookies only for service functionality
- You can delete cookies through your browser
- See our Privacy Policy for CCPA rights

10. Mobile Apps (Future)

Currently, CiteSpark is a web-based service. If we release mobile apps in the future:
- This Cookie Policy will apply to app identifiers and similar technologies
- We will update this policy with mobile-specific information
- The same privacy-first principles will apply

11. Contact Us

If you have questions about our use of cookies:

Email: contact@intelldynamic.ro

Mailing Address:
IntellDynamic S.R.L.
Libertatii nr. 7
Targoviste
Romania

12. Additional Resources

Learn more about cookies:
- All About Cookies
- Your Online Choices (EU)
- Network Advertising Initiative

Data Protection Authorities:
- EU/EEA: List of DPAs
- UK: Information Commissioner's Office
- California: California Attorney General

13. Summary

What cookies we use:
- ✓ Essential authentication cookies only
- ✓ Firebase authentication (necessary)
- ✗ NO advertising cookies
- ✗ NO tracking cookies
- ✗ NO analytics cookies

Your control:
- ✓ Manage cookies via browser settings
- ✓ Delete cookies anytime
- ✓ DNT header respected
- ✓ No consent required (essential cookies only)

Our commitment:
- ✓ Privacy-first approach
- ✓ Minimal cookie use
- ✓ Transparent practices
- ✓ GDPR & CCPA compliant

By using the Service, you consent to our use of essential cookies as described in this Cookie Policy.

Last Updated: October 12, 2025
Version: 1.0