Cookie Policy

1. What cookies and similar technologies are

Cookies are small text files that a website stores on your device through your browser. Similar technologies include the browser’s local and session storage, which the Service uses to remember settings on your device. We use the terms “cookie” and “storage” broadly below to cover both.

2. Strictly necessary cookies — keeping you signed in

The Service uses session cookies to keep you signed in. These are strictly necessary: without them you cannot sign in or use the Service.

• accessToken — a short-lived token cookie (around 1 day) that identifies your session while you use the Service.
• refreshToken — a longer-lived token cookie (around 30 days) used to obtain a new access token when the current one expires, so you are not signed out mid-use.

3. How session cookies are set

When you sign in, our servers issue these session cookies. The server-set versions are transmitted with the HttpOnly, SameSite=Lax, and (in production) Secure attributes, meaning they can only be sent over HTTPS and are not readable by client-side scripts.

Because the AvenueSnipe web application communicates with our API by attaching tokens to requests, our own application code also maintains working copies of the same session tokens in your browser’s cookies. These client-managed copies exist for the same purpose — keeping you signed in and authenticating your requests — and are removed when you sign out. You can also clear them through your browser’s cookie controls; doing so will sign you out of the Service.

4. Functional storage — remembering your preferences

We use your browser’s local storage to remember choices you make on your own device. This storage is not used to track you and is not sent to us for advertising:

• Theme preference (light or dark mode) so the Service looks the way you chose on your next visit.
• Dashboard preferences, such as the expanded/collapsed state of the listings filter panel and the last filter state you used.
• A “seen once” flag so informational introductions (for example, in product hunting) do not reappear every time.

5. Third-party cookies and scripts

We do not set advertising cookies, social-media cookies, or third-party tracking or analytics cookies, and we do not use cookies to build a profile of you for marketing.

A small number of third-party technologies are used, as follows:

• Stripe — the checkout on our subscription page is provided by Stripe (a buy button and, when you manage your subscription, the Stripe Customer Portal). Those elements run on Stripe’s own domains or in Stripe’s scripts, and Stripe may set cookies or use storage in connection with them in line with Stripe’s own Cookie Policy. We do not control those cookies.
• Fonts — our website and our transactional emails load web fonts from Fontshare (api.fontshare.com). Font requests do not set tracking cookies.

6. Consent

The cookies and storage described above are either strictly necessary for the Service to function or are functional preferences stored on your device. Under the UK and EU rules that govern cookies (including the Privacy and Electronic Communications Regulations and ePrivacy), no separate consent banner is required for these technologies.

If we ever introduce non-essential cookies or tracking technologies, we will update this policy and, where required, ask for your consent before they are used.

7. Managing cookies and storage

You can control and delete cookies and site data through your browser settings, and most browsers let you block cookies by site. Because the session cookies are essential to the Service, blocking or deleting them will sign you out and may prevent you from signing in or using key functionality.

Local storage set by the Service can be cleared in the same way as other site data; clearing it may reset preferences such as your theme.

8. Changes to this policy

We may update this Cookie Policy from time to time. When we do, we will update the “Last updated” date at the top of this page.

9. Contact

Questions about this Cookie Policy can be sent to [email protected].