Cookie Policy

Last updated: May 2026

CiteFlow uses only essential cookies and local-storage entries to operate the Service. We do not use analytics cookies, advertising cookies, or any third-party tracking.

1. What we use

• Authentication session cookies (set by Supabase) so you stay signed in.
• CSRF protection tokens to prevent cross-site request forgery on authenticated actions.
• Site preference values (your selected site, date range, and similar UI state) stored in your browser's local storage.
• A small dismissal flag (citeflow:cookie-notice-dismissed) to remember that you have seen the cookie notice.

2. Why these are essential

Without these cookies the Service cannot keep you signed in, cannot protect authenticated requests, and cannot remember which site you are working in. They are strictly necessary under PECR and require no consent.

3. Managing cookies

You can clear or block cookies in your browser settings. Doing so will sign you out and may prevent the Service from working correctly. See your browser's documentation: Chrome, Firefox, Safari, Edge.

4. Future changes

If we ever add non-essential cookies (for example, analytics) we will update this page, refresh the cookie notice, and ask for your consent before any non-essential cookies are set.

5. Contact

Questions: privacy@citeflow.co.uk.