Cookie Policy

Last Updated: December 2024. SurveyCrew.app uses cookies, local storage, and similar technologies to provide, secure, and improve our Service. This policy explains what we use and why.

What are cookies?

Cookies are small text files stored on your device by your web browser. Local storage and session storage are similar browser-based storage mechanisms. These help us remember your preferences, keep you signed in, and protect the Service.

Types of cookies and storage we use

1. Strictly necessary (Essential)

These are required for the Service to function and cannot be disabled.

Authentication tokens: Firebase Auth stores session tokens in browser storage to keep you signed in securely. These persist until you log out.
OAuth state cookies: Temporary cookies used during Google OAuth login to prevent CSRF attacks. These expire after login completes.
CSRF protection: Anti-forgery tokens to protect against cross-site request forgery attacks.
Rate limiting: Upstash Redis stores rate limit counters to prevent abuse (short-lived, typically minutes).

2. Functional

These enhance your experience and remember your preferences.

User preferences: Camera settings (front/back), media mode (capture/upload), and other workspace preferences stored in local storage (persistent).
UI state: Panel visibility, sorting preferences, and view modes stored in local storage.

3. Performance and analytics

These help us understand and improve Service reliability.

Error tracking: Sentry may use cookies to correlate error reports and diagnose issues (session-based).
Performance monitoring: Minimal usage metrics to track app performance and identify bottlenecks.

4. Payment processing

Stripe cookies: When you make a payment, Stripe may set cookies for fraud prevention and secure payment processing (managed by Stripe, see their cookie policy).

5. Progressive Web App (PWA)

Service worker cache: Stores app assets locally for offline access and faster load times.
IndexedDB: May cache survey data temporarily for offline functionality.

Third-party cookies

We use the following third-party services that may set cookies:

Firebase/Google: Authentication, storage, and database services.
Stripe: Payment processing (cookies set only during checkout).
Sentry: Error monitoring and diagnostics.

These providers are contractually required to protect your data. We do not use advertising or social media tracking cookies.

Cookie duration

Session cookies: Deleted when you close your browser.
Persistent cookies: Remain until you log out or clear browser data (authentication tokens, user preferences).
Temporary cookies: OAuth state cookies expire within minutes.

Your control and choices

Clear cookies: You can delete cookies through your browser settings at any time. Note that clearing authentication cookies will log you out.
Block cookies: Most browsers allow you to block cookies. However, blocking essential cookies will prevent you from signing in and using the Service.
Local storage: You can clear local storage through browser developer tools. This will reset your preferences.
Opt-out: While you cannot opt out of essential cookies, you can disable error tracking by blocking Sentry in browser extensions.

How to manage cookies in your browser:

Chrome: Settings → Privacy and security → Cookies and other site data
Firefox: Settings → Privacy & Security → Cookies and Site Data
Safari: Preferences → Privacy → Manage Website Data
Edge: Settings → Cookies and site permissions

Do Not Track

We respect Do Not Track (DNT) browser signals. When DNT is enabled, we minimize analytics and tracking where possible while maintaining essential security features.

Changes to this policy

We may update this Cookie Policy from time to time. Changes will be posted on this page with an updated "Last Updated" date. Continued use of the Service after changes constitutes acceptance.

For questions about cookies or this policy, contact us at hello@liveratech.com.