Cookies Policy

01

What Are Cookies?

Cookies are small text files stored on your device when you visit a website. They allow the site to remember information about your visit — such as whether you are signed in — across page loads and sessions.

RevSmart also uses browser local storage, a similar technology that stores data as key-value pairs in your browser, scoped to our site. Unlike cookies, local storage items are not automatically sent to the server with each request — our JavaScript reads them explicitly when needed.

For the purposes of this policy, "cookies" refers to both traditional cookies and local storage items used by RevSmart.

02

Cookie Categories We Use

RevSmart uses four categories of cookies. You can manage your preferences at any time using the Cookie Preferences button in the sidebar or the banner that appears on your first visit.

🔒

Essential Always On

Required for the core Service to function. These cookies keep you signed in, authenticate your requests to our AI generation service, and maintain your session security. They cannot be disabled — without them, the app cannot operate.

📊

Analytics Optional — Consent Required

We use Google Analytics 4 to understand how users interact with RevSmart — which features are used most, where users drop off, and how the app performs across devices. This data is aggregated and anonymised (IP anonymisation enabled). Google Analytics only loads after you have given explicit consent.

📣

Marketing Optional — Consent Required

Marketing cookies enable remarketing features so we can show RevSmart promotions to previous visitors. These tools are not yet fully active — opting in now means they will apply when we introduce them. We will update this policy before activating any specific marketing platform.

⚙️

Preferences Optional — Consent Required

Preference cookies remember your UI settings across sessions — such as your selected business type. Without these, you may need to re-select your preferences on each visit.

Your consent is meaningful. Optional categories are strictly consent-gated — those scripts do not load at all until you explicitly accept them. If you dismiss or reject the banner, only Essential cookies are active.

03

Full Storage Inventory

The following is a complete list of every item RevSmart stores in your browser:

Name	Category	Purpose	Duration
`rs_session_token`	Essential	Cryptographic token sent with AI generation requests to verify authentication. Never stored server-side in plain text.	Until sign-out
`rs_cookie_consent`	Essential	Stores your cookie consent choices as JSON so the banner does not reappear and your preferences are honoured on every visit.	Persistent
`sb-[ref]-auth-token`	Essential	Encrypted authentication session set by Supabase. Keeps you signed in and refreshes your session automatically.	Until sign-out / expiry
`rs_profiles_[userId]`	Essential	Stores Agency plan business profile names locally. Only present on the Agency plan.	Persistent
`rs_profile_bizname_[name]`	Preferences	Saves the last-used business name per Agency profile so it pre-fills on return. Only set with your consent.	Persistent
`_ga`, `_ga_[id]`	Analytics	Google Analytics 4 cookies that distinguish unique users and sessions for aggregated usage reporting. IP anonymisation is enabled. Only set with your explicit consent.	2 years / 13 months

If you find entries on revsmart.pro not listed above, please report them to [email protected].

04

Third-Party Cookies & Scripts

Google Analytics 4 (`googletagmanager.com`)

When you accept Analytics cookies, we load Google Analytics 4. Google may set _ga and related cookies on the revsmart.pro domain. All data is collected with IP anonymisation enabled. Google acts as a data processor under our instructions. See Google's Privacy Policy and Google Analytics data practices.

Stripe.js (`js.stripe.com`)

Stripe's JavaScript library powers our payment integration. Stripe may set cookies on the stripe.com domain for fraud prevention. These are essential for payment security and do not track browsing behaviour for advertising. Governed by Stripe's Privacy Policy.

Google Fonts (`fonts.googleapis.com`)

We load typefaces from Google Fonts. Google may log font requests including your IP address. Google Fonts does not set advertising cookies. See Google Fonts privacy FAQ.

Supabase SDK (`cdn.jsdelivr.net`)

The Supabase JavaScript SDK is served from jsDelivr's CDN. jsDelivr may log requests for CDN performance. No cookies are set by jsDelivr.

05

Your Controls

Cookie Preferences Panel

You can open the Cookie Preferences panel at any time to review or change your choices:

Using the Cookie Preferences button in the sidebar of this page;
From the cookie banner shown on your first visit;
By calling window.RevSmartConsent.openPreferences() in your browser console.

Browser Settings

You can also manage or delete cookies via your browser:

Chrome / Edge: Settings → Privacy and security → Cookies and other site data
Firefox: Settings → Privacy & Security → Cookies and Site Data
Safari: Settings → Privacy → Manage Website Data

Note that blocking all local storage for revsmart.pro will prevent the Service from functioning, as it is required for authentication.

Google Analytics Opt-Out

You can also opt out of Google Analytics across all websites via the Google Analytics Opt-out Browser Add-on.

06

Consent & Legal Basis (GDPR / ePrivacy)

Under the EU ePrivacy Directive and UK PECR, our legal basis for each category is:

Essential: Strictly necessary for a service you have explicitly requested — no consent required under ePrivacy Article 5(3).
Analytics, Marketing, Preferences: Your freely given, specific, informed, and unambiguous consent (GDPR Article 6(1)(a)). These are disabled by default and will not activate unless you explicitly accept them.

Your consent is recorded with a timestamp in rs_cookie_consent. You may withdraw consent at any time by reopening Cookie Preferences and toggling off the relevant categories. Withdrawal does not affect the lawfulness of processing that occurred before withdrawal.

07

Changes to This Policy

We will update this policy whenever our cookie practices change — including before activating any new marketing platform. Material changes will be communicated by email and by updating the effective date above. If we introduce a new optional category, we will request fresh consent rather than relying on prior blanket acceptance.

08

Contact Us

Email: [email protected]
Response time: Within 5 business days.

For broader privacy rights, see our Privacy Policy.

This Cookies Policy was last updated on February 24, 2026.