Last updated: 14.06.2026
This Cookie Policy explains how RankUp OÜ (“RankUp”, “we”, “us”) uses cookies and similar technologies on our website (rankup.so) and our platform (app.rankup.so). It should be read alongside our Privacy Policy, which explains how we handle personal data more generally.
We cover two surfaces in this policy: our marketing website (rankup.so), which anyone can browse, and our application (app.rankup.so), which you use once you have an account. They set different cookies, so we describe them separately below.
Cookies are small text files placed on your device when you visit a website. Similar technologies — such as local storage, session storage, and pixels — work in comparable ways, and throughout this policy “cookies” refers to all of these. They can be set by us (“first-party”) or by a third-party service we use (“third-party”), and they can last only for your browsing session (“session”) or persist for a set period (“persistent”).
Strictly necessary. Required for the site or app to function — for example, keeping you signed in, authenticating you via Google sign-in, processing payments and preventing fraud, and remembering your cookie choices. These do not require consent, because the service cannot work without them.
Analytics and performance. Help us understand how the site and app are used so we can improve them — including session-recording and heatmap tools. These are not essential. On our marketing website we load cookie-based analytics only with your consent; in the application we run analytics under our legitimate interests and you can opt out at any time. Section 5 explains how each surface works.
Functional. Remember choices you make and enable embedded content (such as our booking scheduler and videos) to work. On our marketing website, embedded content like the booking calendar and videos loads only when you choose to use it, so its cookies are set only at that point (see section 5); in the application, functional storage supports core in-app features, such as remembering your preferences and last location.
Advertising. Set by third-party tools embedded on our dedicated booking pages — in particular our embedded booking widget (cal.com), which loads advertising and measurement pixels from providers such as Meta, X (Twitter), and Google. These appear only on our booking pages and load only when you choose to open the booking calendar; they are not essential, and because they load on your initiative they are not controlled by the cookie banner (see section 5). We do not use advertising cookies in the application.
The tables below list the cookies and similar technologies on each surface. Durations for third-party cookies are set by those providers and may change.
| Cookie / technology | Provider | Purpose | Category | Duration |
|---|---|---|---|---|
| ph_* cookie + local/session storage | PostHog | Product/site analytics and session replay | Analytics | ~12 months |
| CLID, _clck, _clsk | Microsoft Clarity | Session recording, heatmaps, and usage analytics | Analytics | CLID / _clck ~1 year; _clsk ~1 day |
| _ga, _ga_EMN006SCN7 | Google Analytics | Visitor measurement and site analytics (set only after consent; see section 5) | Analytics | up to ~2 years |
| YouTube cookies (VISITOR_INFO1_LIVE, YSC, SID, and others) | YouTube / Google | Set when an embedded video loads; enables playback and Google’s own measurement | Functional / Advertising (third-party) | session to ~2 years |
| cal.com functional cookies (__Secure-next-auth.*, __cf_bm) | cal.com | Operate and secure the embedded booking widget | Functional (third-party) | session to ~1 month |
| _fbp, _twpid, _gcl_au (loaded via the cal.com embed, on booking pages) | Meta, X (Twitter), Google | Advertising and measurement pixels loaded by the embedded booking widget | Advertising (third-party) | _fbp ~3 months; _twpid ~13 months; _gcl_au ~3 months |
| cookie-consent | RankUp (first-party) | Remembers your cookie choice | Strictly necessary | persistent (local storage) |
| Cookie / technology | Provider | Purpose | Category | Duration |
|---|---|---|---|---|
| Session cookie (HttpOnly) | RankUp (first-party) | Keeps you signed in and secures your session | Strictly necessary | session / persistent |
| ph_* cookie + local/session storage | PostHog | Product analytics and session replay | Analytics | ~12 months |
| Google sign-in cookies (SID, SAPISID, NID, and others) | Authenticate you when you sign in with Google | Strictly necessary (third-party) | session to ~1 year | |
| Stripe device/session storage | Stripe | Payment processing and fraud prevention | Strictly necessary (third-party) | persistent |
| Featurebase changelog/support storage | Featurebase | Powers in-app support, feedback, and the changelog | Functional (third-party) | persistent |
| workspace:lastLocation, writer-copilot-*, writer-speed | RankUp (first-party) | Remembers your in-app preferences and last location | Functional | persistent (local storage) |
| cookie-consent | RankUp (first-party) | Remembers your cookie choice | Strictly necessary | persistent (local storage) |
Our error-monitoring provider (Sentry) operates without setting cookies; it sends diagnostic data through network requests.
We handle non-essential cookies differently on our marketing website and in our application, so we describe each below.
When you first visit, we show a cookie banner. Strictly necessary cookies load automatically, because the site cannot function without them. We do not set any analytics or session-recording cookies on your device until you make a choice.
If you accept, we enable our analytics and session-recording tools (PostHog, Microsoft Clarity, and Google Analytics).
If you decline, we do not set analytics or session-recording cookies, and session recording (PostHog and Microsoft Clarity replay) stays off. We still collect a limited amount of anonymous, aggregated usage measurement that does not store anything on your device or identify you — specifically, PostHog operates in a cookieless, in-memory mode, and Google Analytics operates in a cookieless mode (Google Consent Mode), so that we can understand overall site traffic without tracking you individually.
Embedded content — such as YouTube videos and the cal.com booking calendar on our booking pages — is separate from the choice above. It is not loaded automatically and is not controlled by the cookie banner: it loads only when you choose to interact with it, for example when you click to play a video or open the booking calendar. When it loads, the third-party provider may set its own cookies, including the advertising pixels listed in section 4, regardless of your analytics choice. If you prefer not to allow these, do not start the video or open the booking calendar, or block third-party cookies in your browser.
You can change or withdraw your analytics choice at any time via the “Cookie settings” link in our website footer, which re-opens the banner.
In the signed-in application, strictly necessary cookies — for sign-in, session security, and payment processing — load so the service can work. We use product analytics and session replay (PostHog) and error monitoring (Sentry) to operate, secure, and improve the application. Because these tools are central to how we identify and fix problems for the people using the product, we rely on our legitimate interests as the lawful basis for them, rather than asking for prior consent.
You can opt out of analytics and session recording at any time via “Manage Cookies” in the account menu. We honor your choice immediately and keep it persistently, and opting out does not affect your ability to use the application. You can also control cookies through your browser settings, though blocking strictly necessary cookies may stop parts of the application working.
Some cookies are set by the third-party providers listed in section 4 — including PostHog, Microsoft Clarity, Google, YouTube, cal.com (and the advertising pixels it loads), Stripe, and Featurebase. These providers process data under their own privacy terms, and where they are also our service providers they are listed in our Privacy Policy. We do not control cookies set directly by third parties. On our marketing website, the consent mechanism described in section 5 governs our analytics tools (PostHog, Microsoft Clarity, and Google Analytics), while embedded content (YouTube and the cal.com booking calendar) loads — and may set its own cookies — only when you choose to interact with it, as described in section 5. In the application, you can disable analytics and session-recording cookies at any time via “Manage Cookies”, as described in section 5.
We may update this policy as the cookies we use change. When we do, we will update the date above. If our cookie use changes materially, we will refresh this policy to reflect it.
For any question about this policy, contact RankUp OÜ at support@rankup.so.
