Cookie Policy
This Cookie Policy explains how IndexPilot uses cookies and similar tracking technologies on our website and application. It also explains your choices for managing them.
What are cookies?
Cookies are small text files stored on your device by your browser when you visit a website. They allow the site to remember information about your visit, such as your login state or preferences. Some cookies are essential for the site to function; others are optional and only placed with your consent.
Cookies we use
IndexPilot uses the following categories of cookies:
Required for the service to function. Cannot be disabled.
- firebaseIdToken — stores your Firebase session token (1 hour). Required for authentication.
- firebaseCustomToken — short-lived token for client-side Firebase sign-in (5 minutes).
- googleOAuthState / googleOAuthCallback — CSRF protection for the OAuth flow (10 minutes).
- gscOAuthState / gscOAuthReturnTo — CSRF protection for Google Search Console OAuth (10 minutes).
Help us understand how the service is used so we can improve it. No personally identifiable information is shared with analytics providers.
- Sentry session replay — anonymised session recordings to diagnose errors. Activated only with your consent.
Remember your settings and choices across sessions.
- cookie-consent — stores your cookie preference choice (localStorage, no expiry).
Managing your preferences
You have several options for managing cookies:
- Cookie banner— when you first visit, a banner allows you to accept all cookies or manage preferences. You can revisit this choice at any time by clearing your browser's localStorage for this site.
- Browser settings — all modern browsers allow you to block or delete cookies. Note that blocking essential cookies will prevent sign-in and core features from working.
- Opt-out links — for Sentry analytics, you can opt out via Sentry's privacy controls.
Disabling non-essential cookies will not affect core indexing and SEO features of IndexPilot.
Third-party cookies
IndexPilot does not serve third-party advertising cookies. The only third-party cookies that may be set are those from Google (during OAuth sign-in flows) and Sentry (with consent). We do not use Facebook Pixel, Google Analytics, or any advertising network cookies.
Cookie duration
Cookies set by IndexPilot fall into two categories by duration:
- Session cookies — deleted automatically when you close your browser (OAuth state cookies).
- Persistent cookies — remain on your device for a set period. Our authentication cookie lasts 1 hour; your consent preference is stored in localStorage with no expiry.
Updates to this policy
We may update this Cookie Policy as our practices or the law changes. The “Last updated” date at the top of this page will always reflect the most recent revision. We encourage you to review this policy periodically.
Questions about this policy?
Contact us at privacy@indexpilot.com. We aim to respond within 5 business days.