Plain-English summary
- Sign-in and security cookies are always on. The Service does not work without them.
- We use one analytics tool, Microsoft Clarity, and only on our public marketing pages. It never runs inside the signed-in application.
- Clarity loads only if you accept it in our cookie banner. If you reject, or if you close the page without choosing, it never loads and sets nothing.
- We do not set advertising cookies, cross-site tracking pixels, Meta Pixel, LinkedIn Insight Tag, or Google Analytics.
- We honor the Global Privacy Control (GPC) browser signal. If your browser sends it, we treat that as a rejection and never show you the banner.
- You can change your choice at any time using "Cookie settings" in the footer of every page.
- Questions: support@seogenius.ai.
1. About this page
This page explains the cookies and similar technologies SEO Genius uses. It is meant to be read alongside our Privacy Policy and is referenced from the footer of every page of the Service.
2. What is a cookie?
A cookie is a small text file that a website saves on your browser. Cookies are commonly used to keep you signed in, remember your settings, and protect the site against certain kinds of attack. Some cookies are set by the site you are visiting (first-party). Some are set by other domains the site loads resources from (third-party).
Other technologies in the same family include:
- Local storage (data your browser saves locally, similar to a cookie but typically larger).
- Session storage (data your browser saves only for the duration of the browser tab).
- Pixels / tracking beacons (tiny images that report when a page or email is opened).
- Session recording (a script that records the actions you take on a page, such as clicks and scrolling, so the site owner can replay them later).
For simplicity, we use "cookies" in this page to cover all of these.
3. Cookies we set
There are two groups. The cookies in section 3.1 are always on. The cookies in section 3.2 are set only if you accept them.
3.1 Strictly necessary and preference
Every entry below is set directly by SEO Genius (first-party). None of them is used for advertising, profiling, or cross-site tracking.
| Name | Technology | Set by | Purpose | Type | Duration |
|---|---|---|---|---|---|
better-auth.session_token (named __Secure-better-auth.session_token in production) | Cookie | SEO Genius (first-party) | Keeps you signed in across page loads. Without this, you would be signed out every time the page reloads. | Strictly necessary | 30 days, refreshed while you remain active |
better-auth.state | Cookie | SEO Genius (first-party) | A short-lived signed value that protects the Google sign-in flow against cross-site request forgery and code-injection attacks. Set only while a sign-in is in progress. | Strictly necessary | Minutes (expires when the sign-in flow completes) |
sg_consent | Cookie | SEO Genius (first-party) | Remembers your choice about the analytics cookies in section 3.2, so we do not ask again on every page. Holds one word, granted or denied, and nothing else. | Strictly necessary | 180 days |
theme | Local storage | SEO Genius (first-party) | Remembers if you have selected light or dark mode. | Preference (first-party only) | Until you clear your browser storage |
| Dashboard layout keys (sidebar state, saved view choices) | Local storage | SEO Genius (first-party) | Remembers your dashboard panel sizes and which views are expanded. | Preference (first-party only) | Until you clear your browser storage |
If your browser refuses cookies, we store your consent choice in session storage under the same name so that we still honor it and do not ask again. If that is also refused, we honor your choice for the rest of the visit only.
Cross-site request forgery protection on form submissions is handled by the SameSite attribute on our cookies and server-side origin checks, not by a separate CSRF cookie.
If you reject or clear these cookies and storage values, the Service may not work for you: you will be signed out, and your theme and dashboard layout will reset to default.
3.2 Analytics, set only with your consent
These are set by Microsoft Clarity, a third party. They are set only after you select "Accept" in our cookie banner. If you select "Reject", close the banner without choosing, or send a Global Privacy Control signal, the Clarity script is never loaded and neither of these is ever set.
| Name | Technology | Set by | Purpose | Type | Duration |
|---|---|---|---|---|---|
_clck | Cookie | Microsoft Clarity (third party, clarity.ms) | Connects your repeat visits to the same browser so page interactions can be measured across sessions. | Analytics, consent required | 1 year |
_clsk | Cookie | Microsoft Clarity (third party, clarity.ms) | Groups the pages you view into a single session recording. | Analytics, consent required | 1 day |
We load Clarity through Google Tag Manager, a tag loader operated by Google. Tag Manager sets no cookies of its own, and the Clarity tag is the only tag it carries. Tag Manager is not placed on the page at all until you accept: if you reject, close the banner without choosing, or send a Global Privacy Control signal, neither Tag Manager nor Clarity is ever requested.
If you change your mind and select "Reject" later, we instruct Clarity to delete _clck and _clsk and end the recording session.
3.3 What Clarity records, and where
Where it runs: our public marketing pages only. The pages at /, /pricing, /contact-sales and the other public pages. It does not run on the signed-in application, on the sign-in pages, or on any page that displays your account data, your connected websites, or your Search Console and Analytics figures.
What it records on those pages: pages viewed, clicks, scroll depth, mouse movement, your browser and device type, screen size, the page that referred you, and an approximate location (country and region) derived from your IP address.
What it does not do: it does not read your account data, it is not used for advertising, and it does not follow you to other websites.
Forms on these pages. Our public pages carry a waitlist form and a contact form. We do not use Clarity to read what you type into them: what you submit reaches us through the form itself, and our Privacy Policy governs what we then do with it.
If you would rather no recording of your visit exist, select "Reject" in the banner, or open Cookie settings in the footer if you have already accepted. Rejecting instructs Clarity to delete _clck and _clsk and to end the recording session. You can also email support@seogenius.ai and we will delete the recording.
4. What we don't set
We have made an explicit decision to ship without any of the following:
- No third-party advertising cookies (no DoubleClick, no AdRoll, no Criteo, no Outbrain, no Taboola).
- No cross-site tracking pixels (no Meta Pixel, no LinkedIn Insight Tag, no Twitter / X Pixel, no TikTok Pixel, no Pinterest Tag).
- No Google Analytics. Google Tag Manager is used on our marketing pages as a loader only, and only once you have accepted, as described in section 3.2.
- No A/B testing tools that drop persistent cookies.
- No analytics, session recording, or third-party measurement of any kind inside the signed-in application. Everything in section 3.2 stops at the marketing pages.
This list is meant to be specific. If you find a cookie or tag on a SEO Genius page that does not appear in section 3 above and is not strictly necessary, please report it to support@seogenius.ai and we will investigate.
5. California (CPRA) disclosure
The California Privacy Rights Act (CPRA) treats certain third-party cookie behavior, for example cookies that power cross-context behavioral advertising, as "sharing" of personal information. That triggers a "Do Not Sell or Share My Personal Information" disclosure requirement.
We do not sell personal information, and we do not share it for cross-context behavioral advertising. The analytics described in section 3.2 measure how visitors use our own marketing pages. They are not used to build advertising profiles, they are not used to target you on other websites, and we receive no payment for them.
We treat the Clarity cookies as requiring consent regardless of how that analysis lands, which is why they are opt-in and off by default. Where California or another state's law treats an analytics cookie as sharing, our consent banner and our handling of the GPC signal (section 6) are the opt-out mechanism.
We surface a "Do Not Sell or Share My Personal Information" link and a "Your California Privacy Rights" link in the footer of every page. Those links point to a confirmation that we do not sell or share personal information for cross-context behavioral advertising, and to the California section of our Privacy Policy.
If we change our position in the future, for example by adding LinkedIn Insight Tag for retargeting, we will:
- Update this page and the Privacy Policy.
- Extend the consent banner to cover the new category, still defaulting to off.
- Honor opt-outs, including via GPC (see section 6).
- Announce the change in our next sub-processor change notice.
6. Global Privacy Control (GPC)
The Global Privacy Control is a browser-level signal that tells websites a User does not want their personal information sold or shared. As of January 1, 2026, California, Colorado, Connecticut, and several other states require businesses subject to their privacy laws to honor the GPC signal as a valid opt-out request for sale and sharing.
Our position on GPC:
- We honor the GPC signal automatically. No additional click, banner interaction, or account setting is required from you. If your browser sends the signal, we treat it as a rejection of the analytics cookies in section 3.2. Those cookies are never set and the Clarity script is never loaded.
- We do not show you the cookie banner at all when GPC is present, because there is nothing left for you to decline.
- If you send a GPC signal but decide you want to opt in anyway, you can do so deliberately through "Cookie settings" in the footer. An explicit choice you make yourself takes precedence over the signal, in either direction.
- We do not sell personal information and do not share it for cross-context behavioral advertising, so at the cookie layer GPC and the "Reject" button produce the same outcome.
You can turn on GPC by using a browser or extension that supports it. A current list of GPC-supporting browsers and extensions is maintained at https://globalprivacycontrol.org/.
7. Controlling cookies in your browser
Your first and simplest control is our own banner. Select "Cookie settings" in the footer of any page to change your choice at any time.
You can also clear or block cookies using your browser's privacy settings. The major browsers each provide instructions:
- Google Chrome: Clear, allow, and manage cookies in Chrome
- Mozilla Firefox: Clear cookies and site data in Firefox
- Apple Safari: Clear the history and cookies from Safari
- Microsoft Edge: Delete cookies in Microsoft Edge
Blocking or clearing the cookies in section 3.1 will sign you out and may break parts of the Service. Blocking strictly necessary cookies entirely will prevent you from using the Service. Clearing sg_consent means we will ask you about analytics cookies again on your next visit.
8. Future changes
If we add cookies beyond those listed in section 3, we will:
- Update this page with the new cookie name, purpose, type, and duration.
- Put the new cookie behind the same consent banner, defaulting to off, unless it is strictly necessary.
- Add the vendor to our Sub-Processors page and start the notice period described there.
- For material changes, update the Privacy Policy and email active accounts.
This is the sequence we followed for the analytics cookies added on August 3, 2026.
This page reflects the full and accurate state of cookies set by SEO Genius.
9. Contact
Email: support@seogenius.ai Mail: Rize Digital LLC, 64 Codfish Hill Road, Bethel, CT 06801
Questions about cookies, opt-out behavior, or this page in general are welcome. We respond within 5 business days.
10. Change log
- August 3, 2026: added Microsoft Clarity analytics on the public marketing pages, behind an opt-in consent banner that defaults to off (new section 3.2 and 3.3). Added the
sg_consentcookie that records your choice. Removed the previous statement that we set no analytics or session recording cookies, which no longer described the Service. Restated section 6 to describe how the GPC signal is handled now that there is something for it to switch off. Removed the beta framing from section 4. Microsoft Corporation added to the Sub-Processors page on the same date. - July 9, 2026: first published.