Cookie Policy
Version 1 · Effective Sept. 1, 2026 · Version history
This Cookie Policy explains what cookies and similar technologies (localStorage, sessionStorage, and comparable client-side storage) Closient Search Inc. ("Closient," "we," "us") uses on closient.com and related domains, why, and how you can control them. It supplements our Privacy Policy, which explains more broadly what personal information we collect and why.
This is version 1 of this policy, effective 2026-09-01. See prior versions.
How consent works, by region
Closient's cookie banner adapts to where you're visiting from:
| Region | Treatment |
|---|---|
| EU/EEA, UK, and Canada (including Quebec) | Opt-in. Nothing beyond strictly-necessary cookies runs until you make an explicit choice. Reject-all and accept-all are one click each, equally prominent. |
| California | Notice with opt-out. Analytics cookies are on by default; you can opt out at any time. |
| Everywhere else | Notice only. A short disclosure, no gate. |
If we cannot determine your region, we apply the strictest treatment (opt-in) rather than assume you're somewhere less protective — we would rather ask unnecessarily than fail to ask when we should have.
You can change your choice at any time using "Manage Cookie Preferences" in the site footer, which reopens the consent banner with your current selections. If you're signed in, some choices are also available from your account preferences page.
Strictly necessary (always on — no consent required)
These are required for the Service to function and are never gated behind a consent choice.
| Name | Set by | Purpose | Lifetime |
|---|---|---|---|
__Secure-sessionid |
Closient (Django session framework) | Keeps you signed in | 14 days |
__Secure-csrftoken |
Closient | Security — prevents cross-site request forgery | ~1 year |
messages |
Closient | One-time confirmation/error messages after an action | Deleted after it's shown |
closient_consent |
Closient | Remembers your cookie choice itself (so we don't have to ask every visit) | ~1 year |
| Scan/capture queues (IndexedDB) | Closient | Lets an in-progress barcode scan finish if you briefly lose connectivity | Local to your device |
Functional (region-dependent consent)
These make the Service more convenient but aren't strictly required. Whether they run before you choose depends on the region table above.
| Name | Set by | Purpose | Lifetime |
|---|---|---|---|
last_used_provider |
Closient | Remembers which sign-in provider (Google/Microsoft/LinkedIn) you used last, so we can highlight it | 365 days |
theme (localStorage) |
Closient | Light/dark mode preference | Until cleared |
| Chat/search session state (localStorage) | Closient | Keeps your in-progress search conversation if you're not signed in | Until cleared |
| Google Maps | Powers the "set your location" map on the search page, when you use it | Set by Google |
Analytics (consent required everywhere it's not strictly-necessary)
These help us understand how the Service is used and are never set before you consent (opt-in regions) or before we've applied your opt-out (opt-out regions).
| Name | Set by | Purpose | Lifetime |
|---|---|---|---|
_ga, _ga_* |
Google Analytics (GA4) | Aggregate usage analytics | Up to 2 years |
ph_* |
PostHog | Product analytics, including session replay of on-site interactions (input values are masked) | Set by PostHog |
visitor_id |
Closient (first-party) | Pseudonymous, randomly generated identifier used to attribute a sequence of scans to one visit history (never derived from personal information) | 90 days |
| Telemetry session data | Closient (self-hosted, first-party) | Real-user-monitoring performance data, sampled | Session-scoped |
We also use a self-hosted, first-party error-tracking tool to catch bugs when the Service breaks; it does not use a tracking cookie and runs regardless of your analytics choice, the same way a strictly-necessary error page would.
Marketing
We do not use any marketing or advertising cookies, and we have found no such trackers on the Service. This category exists in our consent framework for completeness and in case that changes in the future — if it does, we will update this table and, in opt-in regions, ask for your consent before any such cookie is set.
Third-party embeds
If you view a Closient store-locator widget embedded on a business's own website (rather than on closient.com), that widget may use a third-party mapping library and, as a fallback when your browser doesn't share a precise location, a third-party IP-geolocation lookup, in order to show you nearby stores. That embed is subject to the privacy practices of the site you're visiting as well as this policy for the Closient-operated portion of the request.
Your choices
- The consent banner — shown on your first visit (and again after a policy update), and reopenable any time via "Manage Cookie Preferences" in the footer.
- Your browser settings — most browsers let you block or delete cookies directly; doing so may break sign-in and other strictly-necessary functionality.
- Do Not Sell or Share (US state privacy laws) — we do not sell personal information for money; where a state law's broader "sharing" definition applies to our analytics cookies, opting out of analytics in the cookie banner opts you out of that sharing too.
Changes to this policy
We may update this policy as the cookies and trackers we use change. A change to which cookies we set, or to the categories above, is published as a new version here, with its own effective date; see version history. If your record shows you consented under an earlier version and the change is material, the banner will reappear so you can make a fresh choice.
Contact us
info@closient.com · see also our Privacy Policy and Subprocessors page.