XypherSEO Cookie Policy
Effective Date: 11 July 2026
Version: 2.0
Applies to: xypherseo.com
The short version
We do not set analytics or marketing cookies on your device until you consent to them. Strictly necessary cookies, which the site cannot run without, are always active.
Saying no is exactly as easy as saying yes. There is no dark pattern, no hidden reject button, no pre-ticked boxes.
You can change your mind any time using the Cookie preferences link in our footer.
If you say no, the website still works. You just will not be counted in our analytics, which is your right and costs you nothing.
1. What this policy covers
This policy explains how xypherseo.com uses cookies and similar technologies.
It sits alongside the XypherSEO Privacy Policy, which explains what we do with the data those technologies collect.
This policy does not cover cookies set by the XypherSEO plugin inside your own WordPress site. Those are set on your domain, by your site, and they are your responsibility to disclose to your own visitors. The plugin does not set any tracking cookie on your visitors on our behalf.
2. What a cookie is
A cookie is a small file a website puts on your device so it can recognise you next time, remember your settings, or count how many people visited.
Some technologies do the same job without a file: local storage, session storage, pixels, web beacons, and device fingerprinting.
In this policy, "cookie" means all of them. The law treats them the same, so we do too.
3. Our consent standard, stated plainly
Under the ePrivacy Directive, and as the Court of Justice of the European Union confirmed in Planet49 (Case C-673/17), consent for non-essential cookies must be:
Prior. We ask before we set the cookie, not after.
Specific. You consent to a category, not to everything at once.
Informed. We tell you what each category does before you choose.
Unambiguous. You have to actively click. Silence is not consent. Scrolling is not consent. Continuing to browse is not consent.
Freely given. You can refuse and still use the site.
Withdrawable. Withdrawing is as easy as giving.
We apply this standard to everyone, everywhere in the world, not just to EU visitors. It is a better standard and it is simpler to run one system than two.
3.1 What we do not do
We do not use pre-ticked boxes.
We do not set analytics or marketing cookies on your device before you have given consent. Where a provider is loaded on the page, it is instructed not to use cookies or store identifiers until consent is given.
We do not hide the reject button, make it smaller, make it a different colour, or bury it behind an extra click. Accept and Reject are the same size, the same prominence, and the same number of clicks.
We do not use cookie walls. You do not have to accept cookies to read our website.
We do not interpret closing the banner as consent.
4. The cookies we use
4.1 Strictly necessary (always on, no consent needed)
These make the website work. Without them, pages will not load, checkout will not complete, and forms will not submit.
What they do: session management, security and fraud prevention, load balancing, remembering your cookie choices, and completing your purchase.
Why no consent is needed: the law exempts cookies that are strictly necessary to provide a service you have explicitly requested. Loading the page you asked for is such a service.
You cannot turn these off, because turning them off would break the thing you came here to use.
4.2 Preference cookies (consent required)
These remember your choices: language, currency, region, and interface settings.
If you say no, the site still works. You just have to set your preferences again each visit.
4.3 Analytics cookies (consent required)
These tell us how many people visited, which pages they read, where they came from, and where they gave up.
We currently use Google Tag Manager, Google Analytics 4, and Microsoft Clarity. Google Tag Manager is the container that loads our analytics and marketing tags; it sets no cookie of its own until a tag inside it is permitted to. Microsoft Clarity records aggregate interaction data such as scrolls and clicks so we can see where a page confuses people.
We use this to decide what to build and what to write. Nothing more. We do not use it to identify you personally, and we do not combine it with your account data.
If you decline, analytics cookies are not set and this data is not collected for your visit.
4.4 Marketing cookies (consent required)
These let us show XypherSEO ads to you on other websites, measure whether those ads worked, and credit affiliates who referred you.
Providers we may use: Google Ads, LinkedIn Ads, Meta Ads, and our affiliate tracking platform.
If you say no, you will still see ads on the internet. They just will not be ours, and they will not be based on your visit here.
4.5 Tools we use to build the product
We use AI tooling, including Anthropic Claude, in the course of developing and improving XypherSEO. These tools are used by our team on our own machines and in our own development environment. They do not run on this website, they set no cookie on your device, and they receive no data about your visit here.
We name them because we would rather over-disclose than have you discover a tool we quietly used. If that ever changes, and a development tool starts touching visitor data, this policy changes first.
4.6 Third-party cookies
Some things we embed (video players, chat widgets, social embeds) set their own cookies. When they do, they act as independent controllers and their own policies apply.
We load these only after you have consented to the relevant category. Before consent, embeds are replaced with a click-to-load placeholder.
5. How long they last
Session cookies die when you close your browser.
Persistent cookies last longer. Ours expire between 30 days and 13 months from your last visit. None of ours lasts longer than 13 months, which is the maximum the French data protection authority considers acceptable and which we apply globally.
Your consent choice itself is remembered for 6 months. After that we ask you again, so that consent stays fresh and you are not bound by a decision you made a year ago and forgot.
6. How to control cookies
6.1 On our site
The consent banner appears on your first visit. Choose Accept All, Reject All, or Manage Preferences.
To change your mind later, click Cookie preferences in the footer of any page. This is always available. Withdrawing consent is one click, the same as giving it.
6.2 In your browser
Every major browser lets you block or delete cookies:
Chrome: Settings, Privacy and security, Third-party cookies
Firefox: Settings, Privacy and Security
Safari: Preferences, Privacy
Edge: Settings, Cookies and site permissions
Blocking strictly necessary cookies through your browser may break the site. That is not us being difficult. It is what those cookies are for.
6.3 Global Privacy Control
We honour the Global Privacy Control (GPC) signal. If your browser sends it, we treat it as an opt-out of sale and sharing, and as a rejection of marketing cookies, without you having to click anything.
We do not currently honour Do Not Track, because DNT was never standardised and no two browsers mean the same thing by it. GPC is the standard that actually works, and we honour that one.
7. Changes
If we add a new cookie category, or a new provider in an existing category, we will update this policy and, where the change is material, ask for your consent again.
We will not slip a new tracker in and hope you do not notice.
8. Questions
Last reviewed: 11 July 2026
9. Statutory entity details
Published as required by Section 12(3)(c) of the Companies Act 2013 and Rule 4(2) of the Consumer Protection (E-Commerce) Rules 2020.
Company name: XypherSEO
Website: xypherseo.com
Support email: Hello@xypherseo.com
Address: New Delhi, India
10. Governing law and jurisdiction
This Cookie Policy forms part of the XypherSEO Terms and Conditions.
It is governed by the laws of India, and the courts at New Delhi, India have exclusive jurisdiction, subject to Clause 19.3 of the Terms and to the Country Schedules in Part B of the Terms.