Cookie Notice
ResearchC
Last Updated: March 15, 2026
1. About This Cookie Notice
This Cookie Notice explains how ResearchC ("ResearchC," "we," "us," or "our") uses cookies and similar browser storage technologies when you access or use the ResearchC website and related services at researchc.app (collectively, the "Service").
This Notice supplements, and should be read together with, the ResearchC Privacy Policy, which explains how we collect, use, and store personal information more broadly. The Privacy Policy governs all personal-data processing; this Notice focuses specifically on browser-side storage technologies.
This Notice applies to the researchc.app domain and any sub-domains operated by ResearchC.
2. What Are Cookies and Browser Storage?
ResearchC uses three types of browser-side storage. Understanding the differences helps you make informed choices about your data.
2.1 HTTP Cookies
HTTP cookies are small text files placed on your device by a web server or by JavaScript running in your browser. Each time your browser makes a request to the same server, it automatically sends the stored cookie back — this is what keeps you "signed in" between page loads. Cookies have a defined expiry after which the browser deletes them automatically.
HttpOnly cookies can only be read by the server; JavaScript on the page cannot access them. This makes them more secure for storing session identifiers.
2.2 localStorage
localStorage is a key-value store in your browser that persists data across sessions — the data remains until you clear it, reset browser data, or we explicitly remove it. Unlike cookies, localStorage data is never automatically sent to a server; it lives entirely on your device and is only read by JavaScript running on the ResearchC page.
2.3 sessionStorage
sessionStorage works like localStorage but is automatically cleared when you close the browser tab or window. It is used only for temporary data needed during a single browsing session, such as multi-step sign-up form data.
3. Cookies and Storage We Use
We categorise all browser storage we set as either Strictly Necessary, Functional, or Temporary (session-only). We do not currently use advertising, retargeting, or cross-site tracking technologies.
3.1 Strictly Necessary — HTTP Cookies
The cookies below are essential for the Service to function securely. They do not require consent under applicable law; however, the researchc_session cookie is only set if you have accepted cookie use through the consent banner.
| Name | Purpose | Duration | Party |
|---|---|---|---|
| researchc_session | Maintain your authenticated login session. Set by the ResearchC server using the HttpOnly and Secure flags so it cannot be read by page scripts. | 7 days | First party |
| sidebar:state | Remembers whether the navigation sidebar is expanded or collapsed. | 7 days | First party |
3.2 Strictly Necessary — localStorage
The localStorage keys below are required for core platform functionality, including authentication and preventing duplicate discovery results. They cannot be disabled without significantly impairing your ability to use the Service.
| Key | Purpose | Duration |
|---|---|---|
| researchc_cookie_consent | Stores your cookie consent choice so the consent banner is not shown on every visit. | Until cleared |
| researchc_user_id | Stores your unique account identifier (UUID). Cleared on sign-out. | Until sign-out |
| researchc_liked_ids | Stores the identifiers of researcher profiles you have already connected with or passed on. | Until cleared |
3.3 Functional — localStorage
The keys below enhance your experience by caching data locally to reduce load times and preserve your preferences. All data is stored only in your browser and is not shared with third parties or used for advertising.
| Key | Purpose | Duration |
|---|---|---|
| researchc_premium | Caches your subscription status. | Until updated |
| researchc_notifications | Stores up to 50 in-app notifications. | Until cleared |
| researchc_read_ts | Records timestamps indicating when you last read each conversation. | Until cleared |
| researchc_deleted_convs | Stores identifiers for conversations you have deleted. | Until cleared |
| researchc_blocked_ids | Caches identifiers of users you have blocked. | Until updated |
| researchc_user_photo | Caches your profile photo URL for faster display. | Until updated |
| researchc_network_<userId> | Caches your Research Network graph data. | Until updated |
| researchc_research_proposals | Stores your research proposals locally before sync. | Until synced |
| researchc_daily_limits | Tracks daily usage counts for free-tier accounts. | Resets daily |
| researchc_ai_rec_usage | Tracks AI-recommendation usage for free-tier accounts. | Resets daily/weekly |
| researchc_onboarded | Flags that you have completed the onboarding flow. | Permanent |
| researchc_onboarding_profile | Temporarily holds profile information during multi-step sign-up. | Cleared after sign-up |
3.4 Temporary — sessionStorage
sessionStorage data is held only for the duration of your current browser tab session and is automatically erased when you close the tab. It is not persistent and is not sent to any server.
| Key | Purpose |
|---|---|
| researchc_passed_ids | Records the researcher profiles you have passed on during your current Discover session. |
| researchc_signup_email | Temporarily holds your email address between steps of the sign-up flow. |
| researchc_signup_password | Temporarily holds your password between steps of the sign-up flow. Cleared immediately after registration. |
| researchc_admin_session | Used internally to flag an active administrator session. |
4. Third-Party Technologies
ResearchC relies on the following infrastructure providers. All are used for Service delivery only — none are used for advertising or cross-site tracking. Providers that process personal data operate under data-processing agreements with ResearchC.
| Provider | Role | Client cookies? |
|---|---|---|
| Vercel | Frontend hosting and CDN | May set technical cookies for performance and security. |
| Render | Backend API hosting | No client-facing cookies set. |
| MongoDB Atlas | Database hosting | Server-side only. No cookies or browser storage. |
| Cloudinary | Profile image hosting and CDN | Images are served via URL. No cookies set. |
| Resend | Transactional email delivery | Server-side only. No cookies or browser storage. |
We do not use any third-party advertising networks, social media tracking pixels, or cross-site analytics tools. If we add analytics or monitoring providers in the future, this Notice will be updated and, where required, consent will be requested.
5. Your Choices and Controls
5.1 Cookie Consent Banner
On your first visit to the Service, ResearchC displays a cookie consent banner. You may:
- Accept — enables the researchc_session HttpOnly session cookie for more convenient authenticated access.
- Decline — the platform continues to function using localStorage-only mode. The researchc_session HttpOnly cookie will not be set. You can still sign in and use all features, but your session is maintained through localStorage rather than a server-side cookie.
Your choice is stored in the researchc_cookie_consent localStorage key so that the banner is not repeated.
5.2 Changing Your Consent Choice
You can withdraw or change your consent at any time by clearing the researchc_cookie_consent key from your browser's localStorage. Most browsers offer this through: Settings > Privacy and Security > Clear Browsing Data (or "Site Data"). After clearing, the consent banner will appear again on your next visit.
5.3 Browser Controls
All major browsers provide controls to view, manage, and delete cookies and site data:
- Google Chrome: Settings > Privacy and security > Cookies and other site data
- Mozilla Firefox: Settings > Privacy & Security > Cookies and Site Data
- Apple Safari: Settings > Privacy > Manage Website Data
- Microsoft Edge: Settings > Cookies and site permissions > Manage and delete cookies
You can also use browser developer tools (typically F12 > Application tab) to inspect and delete individual localStorage, sessionStorage, and cookie entries for researchc.app.
5.4 Impact of Disabling Storage
Clearing or blocking all browser storage for researchc.app will:
- Sign you out of the Service (your session identifier will be lost).
- Reset all locally cached preferences, notification state, and message-read timestamps.
- Clear your Discover session history (passed profiles will reappear in your next session).
Strictly necessary storage (researchc_user_id, researchc_liked_ids, and researchc_cookie_consent) is required for the Service to function. Blocking only these keys will impair or prevent sign-in and core features.
6. Legal Basis (EEA and UK Users)
Where the GDPR or UK GDPR applies, our legal basis for each category of storage is as follows:
| Category | Legal Basis | Notes |
|---|---|---|
| Strictly Necessary | Art. 6(1)(b) — Contract; Art. 6(1)(f) — Legitimate interests | Necessary to deliver the Service. Consent is not required. |
| Functional localStorage | Art. 6(1)(f) — Legitimate interests | Improves your experience. Data remains on your device. |
| sessionStorage | Art. 6(1)(b) — Contract | Used only to deliver multi-step sign-up. Cleared automatically on tab close. |
| Analytics / third-party tracking (future) | Art. 6(1)(a) — Consent | If introduced, will require a separate opt-in. |
If you believe that our processing of personal data related to cookies produces legal or similarly significant effects on you, you may request human review or lodge a complaint with your local supervisory authority. Contact us at support@researchc.app.
7. California Residents (CCPA / CPRA)
ResearchC does not sell personal information and does not share personal information for cross-context behavioral advertising, as those terms are defined under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA).
The browser storage described in this Notice is used solely for delivering and improving the Service and is not used to build profiles for advertising or shared with data brokers.
California residents may exercise their rights to access, delete, correct, or opt out of sale/sharing of personal information under the Privacy Policy or by contacting us at support@researchc.app.
8. Data Retention
The following retention periods apply to browser-side storage set by ResearchC:
- Session cookies (researchc_session, sidebar:state): expire 7 days after they are set, or are deleted when you clear browser data or sign out.
- localStorage — strictly necessary and functional keys: persist until you clear your browser's site data, sign out of the Service, or we update our systems and remove the key.
- localStorage — onboarding keys (researchc_onboarding_profile, researchc_signup_email, researchc_signup_password): cleared automatically when registration completes.
- sessionStorage keys: cleared automatically when you close the browser tab.
Server-side data associated with your account (such as session-validation records) follows the retention schedule described in the ResearchC Privacy Policy.
9. International Transfers
The browser storage described in this Notice resides on your own device and is not transmitted to ResearchC servers in the ordinary course (with the exception of the researchc_session HttpOnly cookie, which is sent to the ResearchC server with each authenticated request).
Server-side processing of data associated with your session — including validation of the researchc_session cookie — may occur in the United States and other countries where ResearchC or its infrastructure providers operate. Where required, we apply appropriate transfer safeguards including EU Standard Contractual Clauses (SCCs) and the UK International Data Transfer Addendum (IDTA) as described in the ResearchC Privacy Policy.
10. Changes to This Notice
We may update this Cookie Notice from time to time to reflect changes in the technologies we use or in applicable law. When we make material changes, we will post an updated version with a revised "Last Updated" date at the top of this Notice. Continued use of the Service after the updated Notice is posted constitutes your acceptance of the changes.
We encourage you to review this Notice periodically to stay informed about how we use cookies and browser storage.
11. Contact
If you have questions about this Cookie Notice or about our use of cookies and browser storage, please contact us:
ResearchC
Email: support@researchc.app
Address: 737 Campus Drive, Stanford, CA 94305, United States of America