Cookie Notice

UK law (the Privacy and Electronic Communications Regulations) requires consent for storing anything on your device except what is strictly necessary to provide the service you asked for. Everything we store falls within that exception, or is set only because you actively chose it.

So there is no banner to dismiss. We mention this because the absence of one is usually a sign that a site is ignoring the rules, and here it is the opposite: there is nothing to consent to. If that ever changes, you will be asked properly, before anything is set.

Your sign-in session — a cookie set by our authentication provider (its name begins sb-) holding the token that keeps you logged in. Without it you would be signed out on every page. It is removed when you sign out, and otherwise expires on its own. Strictly necessary.

Your theme preference — the value theme in your browser’s local storage, recording whether you chose light or dark. It is written only when you use the toggle, it never leaves your device, and it identifies nobody. Clearing your browser data removes it.

Anti-bot protection — when the sign-in or registration form is protected by Cloudflare Turnstile, Cloudflare may set a short-lived cookie to confirm the check has passed. It exists to keep automated abuse off the login form. Strictly necessary.

Aggregate analytics — we use Vercel Web Analytics to count page views and understand which pages are used. It does not use cookies, does not build a profile of you and does not follow you to other websites.

No advertising cookies. No third-party tracking pixels on this site. No cross-site tracking, no data broker, no social media buttons that report your visit back. We do not sell or share what we measure.

People usually ask this next, so: if you are a contact of a business that uses CRM City, marketing emails sent to you may record whether you opened them and which links you clicked. That is done with a tracking image and redirected links, not cookies, and it is the business that sent the email — not us — that decides to use it. They are the controller of that data; we only process it for them. Every such email carries a one-click unsubscribe and a link to a preference centre where you can also stop specific kinds of message, or ask for a quiet period, on every channel at once.

Every browser lets you view and delete cookies and local storage, and block them for a site. Blocking the sign-in cookie will stop you being able to log in — that is the trade, and it is why that one is classed as strictly necessary rather than optional.

What we do with personal data more generally is in the Privacy Policy. What we do with the data our customers hold about their own contacts is in the Data Processing Agreement. This notice covers only crmcity.app.

Questions about this notice go to privacy@crmcity.app. For anything else about your account or the service, write to support@crmcity.app.