1. What are cookies?
Cookies are small text files that a website places in your browser. They let the site remember things across page loads or return visits — whether you’re signed in, what theme you picked, what language you prefer. This page also covers related technologies (such as localStorage) that behave similarly, even though they’re not technically cookies.
2. Categories we use
Every cookie or storage entry we set falls into one of two categories. Essential is always on because the site can’t function without it. Marketing is optional and respects your choice from the banner or the preferences modal.
Essential
Session identity, authentication, security, and personal display preferences (theme, accessibility). We rely on the “strictly necessary” basis for these — they enable services you have explicitly requested (signing in, keeping your accessibility settings between visits, remembering your consent choice).
Marketing
Product analytics, attribution, and any third-party trackers that measure how visitors find and use the site. These load only after you opt in. We do not currently run third-party advertising or retargeting pixels; when that changes, this page will be updated first and existing consents may be re-prompted (see “Changes” below).
3. Specific cookies and storage we set
Everything below is set by yourexitpath.com (first-party). Where a value is stored in localStorage instead of a cookie, that’s noted in the “Type” column.
| Name | Purpose | Type | Category | Duration |
|---|---|---|---|---|
| yep_session | Signed-in session for advisor and admin dashboards. | Cookie · HttpOnly | Essential | 30 days (rolling) |
| yep_admin | Legacy admin gate (HMAC-signed) used alongside the session cookie for defense in depth on the /admin surface. | Cookie · HttpOnly | Essential | 8 hours |
| yep_cookie_consent | Remembers your choice from this policy so we don't ask again. | Cookie | Essential | 365 days |
| yep_theme | Light / dark / system preference. | localStorage | Essential | Until cleared |
| yep_a11y_prefs | Accessibility display preferences (text size, reduce motion, high contrast, readable font, underline links). | localStorage | Essential | Until cleared |
| yep_hero_search_v1 | Remembers your last industry + state pick in the homepage hero search so a return visit is pre-filled. | localStorage | Essential | Until cleared |
| yep_lead_gate | Marks that you've unlocked report content on this device so you don't have to re-enter your email. | Cookie | Essential | 90 days |
We don’t currently set any marketing cookies. If that changes, the additions will appear in this table and existing consent records will be re-prompted.
4. Third-party cookies
None today. When we integrate analytics, ad-attribution, or embedded video, this section will list every third party by name, what it collects, and where you can review the provider’s own policy.
5. How to change your preferences
Your consent choice is stored in yep_cookie_consent and applies across every visit from the same browser. You can revise it at any time:
- Use the Cookie settings link in the footer of every page.
- Or open the preferences panel directly: .
- Or clear the cookie manually from your browser settings and the banner will show again on your next visit.
Blocking essential cookies isn’t possible from the preferences panel because the site would stop working. You can still block them at the browser level — the result is that features like sign-in and remembered preferences will be unavailable.
6. Browser-level controls
Every major browser lets you view, block, and delete cookies from a settings menu. Provider-specific guides:
7. Do-Not-Track and Global Privacy Control
We treat a Global Privacy Control (GPC) signal from your browser as a request to reject non-essential cookies. If you’re sending GPC on your first visit, we’ll record that as a “Reject all” choice for the marketing category. The legacy DNT header is not observed by most sites and we don’t act on it distinctly.
8. Changes to this policy
If we add a new category (for example, analytics as a separate opt-in) or start using a new cookie, we’ll update the “last updated” date above and bump the schema version of yep_cookie_consent — that clears the stored record and re-prompts every returning visitor, so no one silently inherits consent for something they didn’t actually agree to.
9. Related policies
The Privacy Policy covers what data we collect beyond cookies. The Terms of Service govern your use of the platform overall.
10. Contact
Questions or corrections? Email privacy@yourexitpath.com or reach us through /contact.