Legal

Cookie Policy

Last updated: 2026-05-11

Working draft. UnfoldSEO is operated as an independent product, with an Estonia OÜ legal entity in formation. This document reflects how the service is run today and will be finalised once the entity is registered and reviewed by counsel. If you need a signed version before that's done, contact success@unfoldseo.com.

This page explains the cookies and similar technologies that UnfoldSEO uses, why we use them, and how you can control them. It supplements the Privacy Policy.

1. What cookies are

Cookies are small text files stored on your device by your browser when you visit a website. They let the site recognise you on subsequent visits, remember preferences, and measure usage. “Similar technologies” (local storage, session storage) work the same way and are covered by this policy.

2. Cookies we use

2.1 Strictly necessary

These are required for the Service to function and cannot be switched off in our system. They don't need your consent.

  • Authentication. An HttpOnly secure cookie that holds your refresh token so you stay logged in across browser sessions. The short-lived access token is held in memory only; we deliberately do not store it in cookies or localStorage.
  • CSRF protection. A token used by the backend to verify state-changing requests come from a trusted source.
  • Tenant resolution. A cookie carrying your current tenant slug, so when you switch between agency clients the right workspace loads.

2.2 Analytics

We use first-party, privacy-respecting product analytics to understand which features people use and where they get stuck. These do not track you across other websites. Set only with your consent (asked on first visit).

2.3 Third-party

  • Stripe. When you visit the billing settings page, Stripe sets its own cookies for fraud prevention and to render the secure card-entry iframe.

3. Managing cookies

You can disable non-essential cookies via the consent banner shown on first visit, or by clearing cookies in your browser settings at any time. Disabling strictly necessary cookies will break the Service's ability to keep you signed in.

4. Changes

We update this policy when we add or remove cookies. Material changes will trigger a fresh consent prompt.

5. Contact

Questions about cookies or related privacy matters? Email success@unfoldseo.com.