Cookie Policy

How Cyril uses cookies and similar technologies on getcyril.com, which ones are strictly necessary, and how you can control or refuse the rest.

Last updated 4 October 2026Draft, legal review pending

Contents
  1. What this site uses
  2. Analytics
  3. The Cyril platform itself
  4. Controlling cookies
  5. Changes
  6. Contact

1What this site uses

The Cyril marketing site (getcyril.com) intentionally uses a minimum of cookies and similar storage. Specifically:

  • Cloudflare security cookies: Cloudflare may set technical cookies for bot mitigation and security (e.g., __cf_bm), including for the Turnstile challenge on our waitlist and contact forms. These are necessary for the site to function safely and are not used for tracking.
  • Language cookies: if you pick a language, cyril_locale remembers it, and if you dismiss our suggestion to switch language, cyril_locale_suggested remembers that. Each holds a language tag only and lasts one year.
  • Your analytics choice: when you answer the analytics banner we store that answer in localStorage under cyril-analytics-consent. It is not a cookie, it is never sent to a server, and it exists only so we stop asking.

2Analytics

Cloudflare Web Analytics runs on every visit, and sets no cookies. Our hosting provider measures page views at the network edge: no cookie, nothing written to your device, no identifier, and no ability to follow you to another site. Because it stores nothing on your device and collects nothing that identifies you, it needs no cookie banner. It is listed on the sub-processors page.

Ahrefs Web Analytics also runs on every visit, and also sets no cookies. It counts page views and interactions such as link clicks without writing anything to your device. Instead of an identifier it counts unique visitors with a one-way hash that changes every 24 hours, so it cannot recognise you on a later day or follow you to another site. Like Cloudflare’s, it needs no cookie banner, and it is listed on the sub-processors page.

Google Analytics 4 is off until you allow it. It does set cookies, so it waits for your answer.

Nothing is requested from Google, and no analytics cookies are set, unless you choose "Allow" on the banner. If you decline, or simply ignore the banner, the analytics code is never loaded at all — we do not use the "consent mode" approach where a tag loads anyway and sends anonymous pings.

If you allow it, Google Analytics sets its own cookies (_ga and _ga_*) to recognise returning visits. Google Analytics 4 does not log or store IP addresses, we do not use Google Signals, advertising features or remarketing, and we do not send Google anything that identifies you personally.

Changing your mind: use the Cookie preferences link in the footer, or clear this site's data in your browser settings, and the banner will ask again.

This site uses no advertising, social media or fingerprinting cookies.

3The Cyril platform itself

When you sign in to the Cyril platform (at app.getcyril.com), it sets a refresh_token cookie that keeps you signed in, and short-lived cookies that protect sign-in and account connections through other providers. The platform administration site uses an equivalent platform_refresh_token. They are technical and necessary, not analytic.

4Controlling cookies

You can clear cookies and localStorage at any time via your browser's settings. The site will continue to function normally.

5Changes

If we add any cookies or similar technologies, we will update this page and the "Last updated" date will reflect the most recent change. Any addition that requires consent will be flagged with a banner.

6Contact

Questions? Contact us.