Cookie Policy
Last Updated: August 16, 2026
CertLynx uses cookies and similar tracking technologies to operate our Software-as-a-Service (SaaS) platform, secure your account, measure platform performance, and enhance your user experience.
1. What are Cookies?
Cookies are small text files stored on your computer or mobile device when you access our platform. They allow us to recognize your device and store specific data points regarding your preferences or active login status.
We also use similar technologies, including session storage, local storage, and device fingerprinting. These tools serve the same kinds of purposes as cookies (keeping you signed in, remembering preferences, measuring usage, and protecting accounts) and are covered by this policy.
2. Categories of Cookies We Use
We classify the cookies and similar technologies used on our platform into the following functional categories:
- Strictly Necessary Cookies (Authentication & Security): These cookies are mandatory for the platform to function. They manage your secure session state, keep you logged into your account, and prevent malicious cross-site exploits. We also use device fingerprinting at sign-up and login to detect banned or repeat devices and prevent account abuse. Fingerprinting is used solely for security and anti-abuse purposes and is not shared with third parties for advertising.
- Functional Cookies (UI Preferences): These cookies store user-defined interface preferences, such as your sidebar collapse state. We may also use local or session storage to remember similar preferences, such as dismissed banners or in-progress drafts.
- Third-Party Security & Fraud Cookies (Stripe): We integrate Stripe, Inc. to process secure subscription billing and payments. Stripe drops necessary operational cookies on your device to analyze transaction risk, detect automated bots, and prevent fraudulent payment activity.
- Third-Party Sign-In Cookies (Google): If you sign in with Google, Google LLC may set cookies as part of its OAuth authentication flow. These cookies are controlled by Google and are used to complete sign-in, protect the login process, and remember your Google account selection.
- Performance & Analytics Cookies: We use a first-party visitor cookie to count unique visits and understand how people find and use CertLynx. We also use Google Analytics, a web analytics service provided by Google LLC, to monitor platform traffic, understand how users interact with our software features, and diagnose performance issues. Google Analytics utilizes cookies (such as
_ga) to collect network information, device details, and page interaction timestamps. The data generated about your usage is transmitted to and stored by Google on servers located in the United States.
3. Cookies We Set
The following table lists the primary cookies used on CertLynx. Third parties may also set additional cookies under their own policies.
| Cookie | Purpose | Duration | Party |
|---|---|---|---|
| next-auth.session-token | Keeps you logged in and authenticates your session | Up to 30 days | CertLynx |
| next-auth.csrf-token | Prevents cross-site request forgery on login and account actions | Session | CertLynx |
| next-auth.callback-url | Returns you to the correct page after sign-in | Session | CertLynx |
| sidebar:state | Remembers sidebar collapse state | 7 days | CertLynx |
| cl_vid | First-party visitor identifier used to count unique visits and measure platform usage | 1 year | CertLynx |
| _ga, _gid, _ga_* | Google Analytics traffic and feature-usage measurement | Up to 2 years | |
| __stripe_mid, __stripe_sid | Stripe fraud prevention and payment security | Up to 1 year | Stripe |
| Google Sign-In | Completes Google OAuth sign-in when you choose Sign in with Google | Set by Google |
On HTTPS, session cookies may appear with a __Secure- prefix (for example, __Secure-next-auth.session-token). Device fingerprinting identifiers may be stored in browser storage rather than as a named cookie.
4. No Behavioral Advertising Tracking
CertLynx does not deploy cookies for behavioral ad retargeting, targeted marketing profiles, or third-party digital advertising exchanges.
5. Managing, Opting-Out, and Disabling Cookies
You can control your cookie settings at any time:
- Browser Controls: You can restrict, block, or delete cookies directly through your internet browser's system settings. This also applies to first-party analytics cookies such as
cl_vid. - Opting Out of Analytics: You can prevent your data from being used by Google Analytics across all websites by installing the official Google Analytics Opt-out Browser Add-on.
- Platform Performance: Because our authentication cookies are strictly necessary to maintain your login session, completely disabling cookies will prevent you from logging into or interacting with the CertLynx application.
6. Contact Us
For any questions regarding this Cookie Policy or our data management structures, please contact our compliance team at: privacy@certlynx.com. For more information about how we handle personal data, see our Privacy Policy.