Cookie Policy
Last updated: June 17, 2026
Summary: Semly Pro uses cookies for essential functions (authentication, security) and optional analytics (Google Analytics 4, Google Tag Manager). You control non-essential cookies through our consent banner. This policy explains what cookies we use and why.
1. What Are Cookies?
Cookies are small text files stored on your device when you visit a website. They help websites remember your preferences, keep you logged in, and understand how you use the site.
Similar technologies include:
- LocalStorage: Browser storage for larger data (consent preferences, draft content)
- SessionStorage: Temporary storage cleared when you close your browser
- Pixels/beacons: Tiny images used for analytics (Google Analytics uses these)
2. Cookies We Use
2.1 Essential Cookies (No Consent Required)
These cookies are necessary for the Services to function and cannot be disabled:
| Cookie Name | Purpose | Duration |
|---|---|---|
| auth-token | Authentication - keeps you logged in | 7 days (extends on activity) |
| csrf-token | Security - prevents cross-site request forgery | Session |
| semly_consent | Stores your cookie consent preferences | 1 year |
| semly_gpc_confirmed | Records that we honored your Global Privacy Control signal | 1 year |
Legal basis: Contractual necessity (GDPR Article 6(1)(b)) - these cookies are essential to provide the Services you requested.
2.2 Analytics Cookies (Consent Required)
We use analytics cookies to understand how visitors use our Services:
| Cookie Name | Provider | Purpose | Duration |
|---|---|---|---|
| _ga | Google Analytics 4 | Distinguishes unique users | 2 years |
| _ga_[ID] | Google Analytics 4 | Stores session state | 2 years |
| _gid | Google Analytics 4 | Distinguishes unique users (24hr) | 24 hours |
| _gat | Google Analytics 4 | Throttles request rate | 1 minute |
Legal basis: Consent (GDPR Article 6(1)(a) and ePrivacy Directive Article 5(3)).
Google Analytics configuration: We have implemented privacy-friendly settings:
- IP anonymization enabled
- Data sharing with Google disabled
- Advertising features disabled
- Consent Mode v2 implemented (denies by default for EU users)
2.3 Marketing Cookies (Not Currently Used)
We do not currently use marketing, advertising, or retargeting cookies. If we add them in the future, we will update this policy and request your consent.
3. Third-Party Cookies
Third-party services may set their own cookies when you interact with embedded content:
3.1 Google Tag Manager (GTM)
GTM ID: GTM-T8B4RZBD
Google Tag Manager manages our analytics tags. It respects your consent choices through Consent Mode v2.
3.2 Stripe (Payment Pages)
When you visit our checkout page, Stripe may set cookies for fraud detection and payment processing. See Stripe's Privacy Policy.
3.3 Google OAuth (Optional Integration)
If you connect Google Analytics or Search Console, Google sets OAuth cookies to maintain your connection. See Google's Cookie Policy.
4. Consent Management
4.1 Consent Banner
When you first visit Semly Pro, you'll see a consent banner with three options:
- Reject All: Only essential cookies are used
- Analytics Only: Essential + analytics cookies (no advertising)
- Accept All: All cookies (currently same as Analytics Only since we have no marketing cookies)
4.2 Google Consent Mode v2
We implement Google Consent Mode v2 to ensure GDPR compliance:
- EU/EEA users: Analytics denied by default until you consent (opt-in)
- Non-EU users: Analytics granted by default but you can opt-out
- Global Privacy Control (GPC): Automatically honored - we deny analytics if your browser sends a GPC signal
4.3 Changing Your Preferences
You can change your cookie preferences at any time by:
- Clearing cookies in your browser settings (this will reset consent to default)
- Using browser privacy features (Do Not Track, Global Privacy Control)
- Contacting us at privacy@semlypro.com to reset your preferences
4.4 Consent Expiration
Your consent choices expire after 1 year. After expiration, we will ask for your consent again.
5. Browser Controls
5.1 Blocking Cookies
Most browsers allow you to block cookies entirely or accept only first-party cookies. However, blocking essential cookies will prevent you from using Semly Pro (you won't be able to log in).
How to manage cookies in popular browsers:
- Chrome: Settings → Privacy and security → Cookies and other site data
- Firefox: Settings → Privacy & Security → Cookies and Site Data
- Safari: Preferences → Privacy → Cookies and website data
- Edge: Settings → Cookies and site permissions → Cookies and data stored
5.2 Do Not Track (DNT)
We do not respond to Do Not Track signals because there is no industry standard for how to interpret them. Instead, we honor the more specific Global Privacy Control (GPC) signal.
5.3 Global Privacy Control (GPC)
We honor GPC signals. If your browser or extension sends a GPC signal, we automatically:
- Deny analytics cookies
- Deny advertising cookies (if we add them in the future)
- Show you a confirmation notice that we've processed your opt-out preference
Learn more about GPC at globalprivacycontrol.org.
6. Cookies on Different Domains
6.1 Marketing Site (semlypro.com)
Our marketing website uses the same cookie policy. When you navigate from semlypro.com to app.semlypro.com, your consent preferences are transferred.
6.2 Application (app.semlypro.com)
The main application uses essential cookies for authentication and optional analytics cookies with your consent.
6.3 Subdomains
Cookies may be set on subdomains (e.g., api.semlypro.com) for API authentication. These are essential cookies necessary for the Services.
7. Data Protection and Privacy
7.1 Cookie Data and GDPR
Data collected via cookies may include personal data (IP addresses, device identifiers). We process this data in accordance with our Privacy Policy and GDPR.
7.2 Cookie Data Retention
- Analytics data: Anonymized after 30 days (IP addresses removed)
- Consent records: 3 years (for compliance documentation)
- Cookie data in logs: 90 days
7.3 Your Rights
You have the same data protection rights for cookie data as for other personal data:
- Access your data (export via Google Analytics if you connected it)
- Delete your data (clear cookies + request deletion of analytics data)
- Withdraw consent (change preferences, clear cookies, or use GPC)
See our Privacy Policy for full details on your rights.
8. Children's Privacy
Our Services are not directed to children under 16. We do not knowingly set cookies on devices used by children. If you believe a child has provided us data via cookies, contact privacy@semlypro.com.
9. Changes to This Policy
We may update this Cookie Policy from time to time. We will notify you of material changes by:
- Updating the "Last updated" date
- Posting a notice on our website
- Re-requesting consent if we add new cookie categories
10. Contact Us
For questions about our use of cookies, contact:
Related legal documents:
Privacy Policy | Terms of Service | Exercise Your Rights