Cookie Policy

Cookies are small text files placed on your device when you visit a website. They are widely used to make websites work efficiently, remember your preferences, and provide usage information to site owners.

Cookies may be “session cookies” (deleted when you close your browser) or “persistent cookies” (stored on your device for a set period or until you delete them). They may be set by the website you are visiting (“first-party cookies”) or by third-party services the site uses.

Similar technologies include local storage, session storage, and pixels. This policy covers all such technologies collectively as “cookies.”

ResearchOrg uses cookies for the following purposes:

• Authentication: To keep you signed in across page loads and browser sessions.
• Preferences: To remember settings such as your preferred plan view or display options.
• Security: To detect and prevent fraudulent activity, CSRF attacks, and unauthorized access.
• Analytics: To understand how users interact with the platform so we can improve it.
• Performance: To identify and resolve technical issues, measure page load times, and optimize delivery.

We do not use cookies for advertising targeting, behavioral profiling for sale to third parties, or any purpose not described in this policy.

Strictly Necessary Cookies

These cookies are essential for the Service to function and cannot be disabled without breaking core functionality. They include:

• sb-access-token / sb-refresh-token: Supabase authentication tokens that maintain your logged-in session. Session cookies — expire when your browser closes or after inactivity.
• __Host-next-auth.csrf-token: CSRF protection token to prevent cross-site request forgery attacks. Session cookie.
• researchorg_session: Session identifier used to associate your activity with your account. Expires after 7 days of inactivity.

Functional Cookies

These cookies enable enhanced functionality and personalization. They may be set by us or third-party providers. Disabling them may affect some features.

• researchorg_prefs: Stores UI preferences such as sidebar state and display settings. Persistent — expires after 1 year.
• researchorg_viewed: Tracks which companies you have viewed to enforce monthly quota limits. Persistent — resets monthly.

Analytics Cookies

These cookies help us understand how the Service is used so we can improve it. All analytics data is aggregated and does not identify individual users.

• _rorg_analytics: First-party analytics cookie tracking page views, session duration, and feature usage. Persistent — expires after 90 days.

Some cookies on our Service are set by third-party providers we use to operate the platform:

• Stripe: When you access billing or payment pages, Stripe may set cookies to detect fraudulent activity and maintain PCI DSS compliance. These are governed by Stripe's Privacy Policy.
• Supabase: Our backend infrastructure provider may set technical cookies for rate limiting and security. These are governed by Supabase's Privacy Policy.

We do not use Google Analytics, Meta Pixel, or any advertising network cookies. We intentionally keep our third-party cookie footprint minimal.

Browser controls: Most browsers allow you to view, manage, and delete cookies through their settings. Common paths:

• Chrome: Settings → Privacy and security → Cookies and other site data
• Firefox: Settings → Privacy & Security → Cookies and Site Data
• Safari: Preferences → Privacy → Manage Website Data
• Edge: Settings → Cookies and site permissions → Cookies and site data

Important: Blocking strictly necessary cookies will prevent you from signing in and using the Service. We recommend blocking only analytics or functional cookies if you wish to limit tracking while maintaining full access.

Do Not Track: Some browsers send a “Do Not Track” (DNT) signal. We honor DNT signals by disabling non-essential analytics cookies when a DNT signal is detected.

Cookie consent: On your first visit, we display a cookie notice. You may update your preferences at any time by clicking “Cookie Settings” in the footer.

Different cookies are retained for different periods:

• Session cookies: Deleted when you close your browser or your session expires.
• Authentication tokens: Expire after 7 days of inactivity; refreshed automatically when you are active.
• Preference cookies: Retained for up to 12 months.
• Analytics cookies: Retained for up to 90 days.

You can delete cookies at any time through your browser settings. Deleting authentication cookies will sign you out of the Service.

We may update this Cookie Policy as our use of cookies changes or when required by law. Material updates will be communicated by displaying a notice on the Service or by updating the “Last updated” date above.

We encourage you to review this policy periodically to stay informed about how we use cookies.

If you have questions about our use of cookies or this policy, please contact us:

• Email: privacy@researchorg.com
• Address: ResearchOrg, Inc., 548 Market St, San Francisco, CA 94104