Cookie
policy.

Cookies are small text files that a website stores in your browser when you visit. They help the site remember information about your visit — such as whether you're logged in — so you don't have to re-enter it every time.

Cookies can be "session cookies" (deleted when you close your browser) or "persistent cookies" (stored until they expire or you delete them). They can also be "first-party" (set by the website you're visiting) or "third-party" (set by external services embedded in the page).

This policy explains exactly which cookies SEOVentra sets, why, and how you can control them.

SEOVentra sets one cookie always, one cookie to remember your cookie choice, and — only if you click "Accept" on the cookie banner — a small set of Google Analytics cookies.

Always set:

• Name: seoventra_session
• Purpose: Authentication — stores your encrypted session token so you stay logged in across page loads
• Type: First-party, HttpOnly, Secure, SameSite=Strict
• Duration: 30 days from last activity; deleted immediately on logout
• Data stored: An opaque, cryptographically random session ID — not your name, email, or any personal data in plaintext

• Name: sv_cookie_consent
• Purpose: Stores your choice per cookie category (currently just Analytics — Strictly Necessary can't be toggled), so we don't ask on every page
• Type: First-party, Secure, SameSite=Lax
• Duration: 12 months, or until you change your choice via "Cookie preferences" in the footer

Set only if you toggle Analytics on and accept or save:

• Names: _ga, _ga_<container-id> (Google Analytics 4)
• Purpose: Aggregate, anonymised usage analytics — which pages get visited, roughly how many people, not who specifically
• Type: First-party (served from seoventra.com), set by Google's gtag.js
• Duration: up to 13 months (Google's default GA4 cookie expiry)
• IP addresses are anonymised before being sent to Google (anonymize_ip is enabled)

The session and consent-choice cookies are strictly necessary and can't be turned off while you use the platform. The Analytics cookies are entirely optional and off by default — nothing from Google Analytics loads or fires until you explicitly accept.

The session cookie's HttpOnly flag means JavaScript cannot read it — it is inaccessible to any scripts running in your browser, protecting it from cross-site scripting attacks. Its SameSite=Strict flag prevents it from being sent in cross-site requests, blocking CSRF attacks. You cannot opt out of the session cookie while remaining logged in.

We are explicit about this because most SaaS platforms set dozens of tracking cookies without disclosure.

Even with optional Google Analytics available (see the previous section), SEOVentra never sets:

• Advertising or retargeting cookies (no Google Ads, Meta Pixel, LinkedIn Insight Tag)
• Behavioural tracking or session-recording cookies (no Hotjar, FullStory, Mixpanel, Amplitude, Heap, or PostHog)
• A/B testing cookies (no Optimizely, VWO, or similar)
• Chat widget cookies (no Intercom, Drift, Crisp, or Zendesk)
• Social media tracking pixels (no Facebook, Twitter/X, TikTok, or Pinterest pixels)
• Cross-site tracking cookies of any kind, from anyone

Google Analytics — the one exception, and only after you accept it on the cookie banner — measures aggregate page views and rough visitor counts. It does not build advertising profiles, does not follow you across other websites, and does not receive your name, email, or account data from us.

If you accept analytics on the cookie banner, Google Analytics 4 cookies are set — see "Cookies we set" above for exactly which ones and why. These are governed by Google's own privacy and cookie policies once the data reaches Google, even though the cookies themselves are served from our domain.

Beyond that, SEOVentra does not embed third-party scripts that set cookies on our pages. There are no marketing automation pixels and no social sharing buttons that phone home.

The other third-party context where cookies may be relevant is during OAuth login flows:

• When you click "Sign in with Google", your browser navigates to Google's domain. Google sets its own cookies as part of their OAuth flow. These are governed by Google's Cookie Policy, not ours. We receive only an authorisation code from Google — we never see or store Google's own cookies.

Payment flows via Razorpay similarly occur on their domains or in isolated iframes. Their cookies are governed by their own policies.

In addition to cookies, SEOVentra uses browser localStorage for two non-sensitive UI preferences:

• theme — stores your light/dark mode preference ("light" or "dark")
• No other localStorage keys are used

localStorage values are stored entirely in your browser and are never sent to our servers. They contain no personal data and are not used for tracking. You can clear them at any time by clearing your browser's site data for seoventra.com.

You have full control over cookies through your browser settings. Every major browser provides a way to view, block, and delete cookies:

• Chrome — Settings → Privacy and security → Cookies and other site data
• Firefox — Settings → Privacy & Security → Cookies and Site Data
• Safari — Settings → Privacy → Manage Website Data
• Edge — Settings → Cookies and site permissions → Cookies and site data
• Brave — Settings → Privacy and security → Cookies

If you delete the SEOVentra session cookie, you will be logged out and will need to sign in again. If you block cookies entirely for seoventra.com, you will not be able to log in or use the authenticated dashboard.

You can also log out of SEOVentra at any time from the dashboard sidebar. Logging out immediately invalidates the server-side session and instructs your browser to delete the session cookie.

Some browsers send a "Do Not Track" (DNT) signal to websites requesting that they not track your browsing behaviour.

Because SEOVentra does not use cross-site tracking of any kind, the DNT signal has no material effect on your experience — we behave the same way regardless. We do not sell data, build advertising profiles, or share behavioural data with any ad networks.

We respect the spirit of DNT by default for every visitor, with or without the signal.

SEOVentra shows a cookie banner the first time you visit, with three options: Accept all, Reject all, or Manage — which opens a preference panel with an individual toggle per cookie category. Strictly Necessary is always on and can't be switched off, since the platform can't function without it; Analytics is a genuine on/off toggle, unchecked by default. Nothing beyond the necessary cookies is set until you make a choice — Google Analytics only loads if Analytics is toggled on and you save or accept.

Your choice is remembered for 12 months in the sv_cookie_consent cookie described above. You can revisit and change it at any time by clicking "Cookie preferences" in the footer of any page — this reopens the panel directly, pre-filled with your current settings, and any change takes effect immediately without a page reload.

Toggling Analytics off does not affect your ability to log in, use the dashboard, or access any paid feature — every part of the product works identically either way. The Strictly Necessary category is exempt from consent under GDPR and similar regulations, and remains active regardless of your other choices, because you can't stay logged in without it.

If you have questions about our cookie use in your region, contact us at [email protected].

This version adds Google Analytics as an optional, consent-gated cookie category — previously SEOVentra set only the session cookie. If we introduce further cookie categories, we will update this policy before doing so, notify existing users by email and in-dashboard notice, and seek consent where required by law.

We commit to never introducing advertising cookies, cross-site tracking cookies, or third-party behavioural analytics without explicit disclosure and, where required, your consent.

The current version of this policy is always available at seoventra.com/cookies. The effective date above reflects when this version was last updated.