Cookie Policy
Last updated 9 October 2026
This policy lists every cookie and every piece of browser storage ProveRank uses, why, and for how long. It supplements the Privacy Policy, which explains how the data is handled once collected.
Your choice
- In the EEA, the UK and Switzerland, no optional cookie is set until you choose. Analytics, advertising measurement and session recordings are off until you press Accept in the cookie banner. Not answering is the same as rejecting. We also ask first when we cannot tell where you are. While they are off, our analytics tag still loads but sets no cookie and sends only signals without any identifier (that a page was viewed or a step completed), which the provider uses for aggregate, modelled counts; the session-recording tool does not load at all.
- Everywhere else, web analytics and session recordings are on unless you turn them off under Cookie settings (below, and in the footer).
- Reject and Accept carry the same weight, and you can change your mind at any time.
- Global Privacy Control and Do Not Track are honoured. If your browser sends either signal, we treat it as a rejection and the banner does not ask.
- Your choice is stored for twelve months, then we ask again. If we add a new kind of optional cookie, we ask again sooner.
To change your choice now: . The same link is in the footer of every public page. Withdrawing consent stops the tools at once, deletes their cookies where the tool allows it, and reloads the page without them. You can also delete cookies in your browser settings.
Strictly necessary
These make the site work and are set without consent. None is used for analytics or advertising.
| Name | Purpose | Set by | Duration |
|---|---|---|---|
| proverank_session | Keeps you signed in. Not readable by scripts | ProveRank | Seven days, or until you sign out |
| proverank_sidebar | Remembers whether you collapsed the app sidebar | ProveRank | One year |
| rv_consent | Remembers your cookie choice and the version of the question you answered | ProveRank | Twelve months |
The browser also keeps a few items in local or session storage that never leave your device: your theme (proverank-theme), a site address you typed before signing up (proverank:pending-audit-url, until the tab closes), and small markers that stop a purchase or a finished audit being counted twice or detect a plan change in analytics (rv_purchase_*, rv_audit_done_*, rv_last_plan).
Bot protection. The sign-up, sign-in, password reset, contact and newsletter forms use our hosting provider’s bot check to confirm that a person, not a script, is sending them. It runs in a frame served by that provider, usually without asking you anything. It sets no cookie on our site; inside its own frame the provider may keep a short-lived value needed for the check. It is not used for analytics or advertising.
Analytics, including session recording
Web analytics tells us which pages are visited and which steps people complete, such as signing up or starting an audit. Cross-device signals and ad personalisation are off and data is kept for two months. Session recording shows how pages are used, as heatmaps and recordings. Inside your account all text and inputs are masked before anything is sent, and recording never runs on administration, sign-in, password, checkout, print or shared-report pages. Neither tool receives your email address or name; signed-in visits carry only an opaque, one-way hashed id.
| Name | Purpose | Provider | Duration |
|---|---|---|---|
| _ga | Distinguishes one browser from another | Analytics provider (Google) | Two years |
| _ga_* | Keeps the state of the current visit | Analytics provider (Google) | Two years |
| _gcl_* | Remembers that a visit came from one of our own ads, so a later sign-up or purchase can be counted for it | Advertising provider (Google) | Three months |
| _clck | Keeps the recording user id and preferences for this site | Session-recording provider | One year |
| _clsk | Joins page views into one session recording | Session-recording provider | One day |
| CLID | Records when the recording tool first saw this browser (third-party) | Session-recording provider | One year |
| ANONCHK | Flag that the advertising id is not used; always 0 (third-party) | Session-recording provider | Ten minutes |
| MR | Whether to refresh the browser id below (third-party) | Session-recording provider | Seven days |
| MUID | Identifies the browser across the provider’s own sites (third-party) | Session-recording provider | Up to thirteen months |
| SM | Synchronises that browser id across the provider’s domains (third-party) | Session-recording provider | Session |
Durations for the tools’ own cookies are as their providers publish them and can change. Session recordings are kept for 30 days (a small sample, and any we mark as favourites, for up to nine months).
Advertising
We do not sell your data, and nothing from inside your account (your sites, audits or keywords) is used for advertising. Where advertising measurement is on for you (see Your choice above: after Accept in the EEA, the UK and Switzerland, elsewhere unless you reject, never with Global Privacy Control or Do Not Track), four tools tell our own advertising accounts that a visit that came from one of our ads ended in a sign-up or a purchase, so we can see which ads work. Our analytics tool does it with the analytics cookies listed above and, when you sign up, your email address in one-way hashed form, never your name; when you buy a plan or pack, our server also reports the purchase to Google Ads with the Google ad click you came from and your email address in one-way hashed form. Meta’s pixel (Facebook and Instagram) records page views and the steps sign-up, starting checkout and purchase, and Meta handles what it receives under its own privacy policy. When you create an account or buy a plan or pack, our server also reports it to Meta (the step, the plan or pack and amount, your email address and account id in one-way hashed form, and the Meta cookies below), so it is counted even if a blocker stops the script; that only happens where advertising measurement is on for you. TikTok’s pixel records page views and the same steps, and TikTok handles what it receives under its own privacy policy. When you create an account or buy a plan or pack, our server also reports it to TikTok (the step, for a purchase the plan or pack and amount, your email address and account id in one-way hashed form, and the TikTok cookies below). OpenAI’s pixel (ads in ChatGPT) records page views and the same steps, and OpenAI handles what it receives under its own privacy policy. When you create an account or buy a plan or pack, our server also reports it to OpenAI (the step, the plan or pack and amount, your email address and account id in one-way hashed form, and the OpenAI cookies below). Microsoft Advertising’s tag (UET, ads on Bing and Microsoft’s network) records page views and the steps sign-up and purchase (for a purchase only the amount and currency), and Microsoft handles what it receives under its own privacy policy; it receives no email address or account id, and it sends nothing on a page whose address names a website you entered. The purchase is also reported to our analytics tool in the same way, where analytics is on. If you reject, no advertising or analytics cookie is set and nothing identifies you: a purchase is still counted by our server as an anonymous sale (plan and amount, with no browser id or click id), and the ad click id, if you came from one of our Google ads, may be carried in the page address from page to page but is not stored. If you are signed in when you switch advertising measurement off, the advertising ids kept with your account are deleted too.
| Name | Purpose | Provider | Duration |
|---|---|---|---|
| _fbp | Identifies this browser to the advertising provider, so a sign-up or purchase can be matched to one of our ads on its platforms | Advertising provider (Meta) | Three months |
| _fbc | Remembers that a visit came from a click on one of our ads on the provider’s platforms | Advertising provider (Meta) | Three months |
| _ttp | Identifies this browser to the advertising provider, so a sign-up or purchase can be matched to one of our ads on its platform | Advertising provider (TikTok) | Up to thirteen months |
| rv_ttclid | Remembers the click id when a visit came from one of our TikTok ads, so a later purchase can be credited to it | ProveRank | Thirty days |
| __obref | Identifies this browser to the advertising provider, so a sign-up or purchase can be matched to one of our ads on its platform | Advertising provider (OpenAI) | Twelve months |
| _uetvid | Identifies this browser to the advertising provider, so a sign-up or purchase can be matched to one of our ads on its platform | Advertising provider (Microsoft) | Up to thirteen months |
| _uetsid | Groups the pages of one visit for the advertising provider | Advertising provider (Microsoft) | One day |
| _uetmsclkid | Remembers the click id when a visit came from one of our Microsoft ads, so a later sign-up or purchase can be credited to it | Advertising provider (Microsoft) | Ninety days |
| __oppref | Remembers the click id when a visit came from one of our ads in ChatGPT, so a later sign-up or purchase can be credited to it | Advertising provider (OpenAI) | Thirty days |
Questions
Write to privacy@proverank.com. See also the Privacy Policy and the Terms of Service.