Cookie Policy

Cookies are small text files that a website or app saves on your device when you visit. They let the site recognise your device next time, remember things as you move between pages, and do other jobs that a website could not do on its own.

Besides ordinary cookies, FirstSales and the outside services we connect to may use these related tools:

• Local storage and session storage: small stores built into your browser. Unlike cookies, they are not sent to our servers with every request. We use them to keep light page settings, such as whether the sidebar is collapsed or what you typed into a form draft.
• Pixel tags (web beacons): tiny invisible images or small scripts in pages or emails that send a request when they load. We use them to see whether a page was viewed or an email was opened, without setting another cookie.
• Analytics tokens without fingerprinting: short-lived random identifiers kept in our own cookies. They do not rely on device fingerprinting. They give us overall usage numbers without tracking you across other sites.

FirstSales does not use device fingerprinting or any method built to identify you across sites without your consent. We designed our analytics to protect your privacy.

We use cookies and similar tools for these reasons:

• To make the product work: without session cookies, the app cannot tell that you are signed in.
• To keep the product secure: fraud-prevention tokens and CSRF protection cookies make it much harder for attackers to take over a signed-in session.
• To remember your settings, so you do not have to set them again on every visit.
• To see how people move through the product, so we can improve it responsibly.
• To measure how our marketing performs, so we spend money on the channels that work.

We use cookies only when they are the right tool for the job. When a server-side or cookie-free method works just as well, we prefer it.

Our cookies fall into four types. Each one is described below, with examples from the FirstSales website and app.

1. Strictly necessary: the website and app cannot work without these, so they cannot be switched off. They include sign-in session tokens that keep you logged in to app.firstsales.io, CSRF tokens that protect forms against cross-site request forgery, load-balancer cookies that send your requests to the right server during your session, and rate-limit identifiers that protect our API from abuse. We never use personal data from these cookies for marketing or profiling.
2. Functional and preferences: these let the site and app remember your choices so the experience fits you. Examples are your chosen language, your cookie banner choices (so we do not ask again on every page), whether you closed onboarding tips or tours in the app, and whether navigation panels are open or closed.
3. Analytics and performance: these help us understand how people use firstsales.io and app.firstsales.io. They show which pages are visited most, where people stop during onboarding, how long sessions last, and whether slowdowns affect real users. The data is grouped together and does not identify individual users. We use our own analytics tools plus a privacy-focused outside provider that removes the identifying part of IP addresses before storing them.
4. Marketing and attribution: these measure how well our paid and unpaid marketing works. They record which channel, ad or keyword brought a visitor to firstsales.io, so we can work out the cost per sign-up and the return on ad spend. Where we can, we keep this data in our own cookies, so we depend less on outside cookies that browsers are phasing out. We never use a cookie of this type to show you ads on other websites without your explicit consent.

Before you respond to the cookie banner, we set only strictly necessary cookies. Every other type needs your opt-in where the law requires it.

First-party cookies are set directly by firstsales.io or app.firstsales.io. Only we can read them, and other websites cannot access them. Most of the cookies we use are first-party.

Third-party cookies are set by outside providers whose code or pixels we load on our pages. These kinds of outside providers may set cookies when you visit FirstSales:

• Analytics providers: we use a privacy-first analytics service to collect grouped, anonymous traffic data. It anonymises IP addresses when it collects them and does not build profiles of individual users to sell.
• Marketing and attribution platforms: pixels from ad networks may load on marketing landing pages (never inside the signed-in app) to measure campaign sign-ups. They turn on only after you agree to marketing cookies.
• Live chat and support widgets: our support widget sets a session identifier so your conversation history is kept between visits. This cookie is functional and is limited to the support subdomain.
• Payments and billing: our payment processor may set cookies to help prevent fraud during checkout. They are strictly necessary for the payment and are deleted when the session ends.

We regularly review every outside script loaded on our site. When we remove a provider, we add its cookies to the blocked list in our consent tool within 30 days.

How long a cookie lasts depends on what it is for:

• Session cookies: these last only while your browser is open and are deleted when you close the tab or window. Examples are CSRF tokens and short sign-in checks.
• Short persistent cookies (1 to 7 days): used, for example, to remember that you recently closed the cookie banner or a promotional pop-up.
• Medium persistent cookies (30 to 90 days): used for keep-me-signed-in tokens and for attribution periods that match our usual trial and sales cycle.
• Long persistent cookies (up to 12 months): used for analytics visitor identifiers when we need to link several visits to measure how many people come back. We never set analytics cookies for longer than 12 months.

You can check when any cookie expires with your browser's developer tools. In most browsers, the Storage or Application panel lists every cookie for the current site, with its value and expiry date.

We never set a cookie that lasts longer than 12 months. If you find one that does, please report it to firstsales@support.communicate.so so we can look into it.

You can control cookies on your device in several ways:

1. Cookie banner and preference centre: on your first visit to firstsales.io you will see a cookie banner. You can accept all types, reject non-essential cookies, or open the preference centre to turn single types on or off. You can change your choices at any time with the Cookie Settings link in the site footer.
2. Browser settings: every modern browser lets you block, delete or limit cookies. See your browser's help pages (Chrome, Firefox, Safari, Edge, Brave) for step-by-step instructions. Browser settings apply to every site, not only FirstSales.
3. Browser extensions: privacy extensions such as uBlock Origin, or a browser's built-in tracking protection, may block some outside scripts before they load. This works well alongside your cookie choices.
4. Opt-out tools from analytics and ad networks: where our providers offer their own opt-out (for example, a global opt-out cookie), we link to it in the preference centre.

You cannot turn off strictly necessary cookies in the cookie banner, because the site needs them to work. If you block them in your browser, you will not be able to sign in to app.firstsales.io and core features will not work properly.

If you turn off analytics cookies, we receive no data about your visit. You can still use the product, but it is harder for us to find performance problems and decide what to improve.

If you turn off marketing cookies, we cannot link your visit to a campaign. You may still see FirstSales ads on other platforms, but they will not be based on what you did on our site.

Do Not Track (DNT) is an optional browser setting that tells websites you prefer not to be tracked across sites. No binding legal standard currently requires websites to follow DNT, and websites handle it in different ways.

FirstSales does not currently change how it uses cookies based on the DNT setting alone. Without a shared standard, we cannot reliably tell what the signal means. Instead, we rely on our consent tool, which keeps a more detailed record of your actual choices that can be checked.

We do respect the Global Privacy Control (GPC) signal where we technically can. GPC is a browser signal that says you opt out of the sale or sharing of your personal data. When we detect GPC from your browser, we treat it as withdrawing your consent to marketing cookies for that session.

If your browser or an extension sends GPC, your marketing cookie setting on firstsales.io is turned off automatically. You can change this in the preference centre if you want.

The legal basis we use to set cookies depends on the type of cookie and where you are:

• Strictly necessary cookies: we rely on legitimate interests (and, in some places, the ePrivacy exemption for storage that is technically essential). You cannot opt out of these in the cookie banner.
• Functional and preferences cookies: we rely on your consent where the EU ePrivacy Directive, UK PECR or similar laws require it. Where those laws do not apply and the cookies clearly help you, we may rely on legitimate interests.
• Analytics and performance cookies: we rely on your consent for visitors from the EU, the UK and other places with similar consent rules. For visitors from other regions, we may rely on legitimate interests as long as the data is anonymous or grouped.
• Marketing and attribution cookies: we always rely on your explicit consent, wherever you are. We set no marketing cookies until you opt in.

We record your consent with a timestamp and the version number of the cookie banner you saw. You can withdraw consent at any time in the preference centre. Withdrawing consent does not make processing that happened before the withdrawal unlawful.

If you visit from California, the California Consumer Privacy Act (CCPA) and the CPRA give you the right to opt out of the sale or sharing of personal information. If any marketing cookie data counts as a sale or share under the CCPA, the Do Not Sell / Do Not Share link in our footer lets you use that right.

We review and update this Cookie Policy from time to time to reflect changes in the tools we use, the law and our own practices. When we make important changes, we update the 'Last updated' date at the top of this page and, where required, ask for your consent again through the cookie banner.

Please check this page from time to time. If you keep using firstsales.io or app.firstsales.io after we post a change, you acknowledge the updated policy. Your consent choices for non-essential cookies still apply.

This Cookie Policy is one of several legal documents that cover your relationship with FirstSales. Please also read our Privacy Policy. It explains in detail how we collect, use, store and protect personal data, and your rights over that data. Read the Privacy Policy and this Cookie Policy together.

Questions about this Cookie Policy or your cookie choices? Email firstsales@support.communicate.so. We aim to reply within 5 business days.

• Email: firstsales@support.communicate.so
• Subject line: Cookie Policy Enquiry
• Reply time: within 5 business days