Cookies are small text files stored on your device by your browser when you visit a website. They are used to remember information about your visit — like sign-in state, language preference, or analytics identifiers. We use both first-party cookies (set by artificane.com) and a small number of third-party cookies (set by trusted service providers we use, like Stripe and reCAPTCHA when present).
We also use closely related technologies such as localStorage, sessionStorage, and pixel tags. References to "cookies" on this page cover all of these.
Strictly necessary: required for the Service to function — authentication, session, CSRF protection, security. These do not require consent and cannot be turned off without breaking the Service.
Functional: remember non-essential preferences such as theme, sidebar state, or recent search filters. Stored as cookies or localStorage.
Analytics: aggregated, de-identified usage measurement to understand which features are used and where users drop off. We use PostHog and Vercel Analytics. These do not load until you select "Accept all" in the consent banner, and you can withdraw consent at any time from /settings → Privacy.
Advertising / marketing: we do not currently use third-party advertising cookies. If we ever introduce them, we will update this page and request consent before they fire.
sb-* — Supabase Auth (strictly necessary). Maintains your sign-in session. Persistent up to one year, refreshed on activity.
x-nonce / x-request-id — short-lived per-request security headers (strictly necessary).
ph_* — PostHog analytics (analytics). Used to attribute repeat visits and compute funnels. Persistent up to one year.
_vercel_* — Vercel Analytics (analytics). Aggregated page-view and web-vitals reporting.
Stripe / reCAPTCHA cookies — set by Stripe and Google when those services are loaded on a payment or auth page. See their respective privacy policies for details.
Most browsers let you block or delete cookies via their settings. Blocking strictly-necessary cookies will break sign-in, payments, and rate-limiting.
You can opt out of analytics at any time from /settings → Privacy without affecting strictly-necessary cookies. Your choice is stored in a first-party preference cookie and respected on all subsequent visits.
If you visit from a region that requires explicit consent (EEA, UK, parts of Latin America), we show a banner on your first visit. Your choice — accept or essential-only — is stored for up to 12 months. You can change it any time by clearing the banner cookie or via /settings → Privacy.
We honor both the Do Not Track (DNT) browser signal and the Global Privacy Control (GPC) signal. If either is enabled, we treat it as a refusal of analytics and do not load analytics cookies or send analytics events — regardless of any choice made in the consent banner. Strictly-necessary cookies are unaffected.
We may update this Cookie Policy as we add or remove service providers. Material changes will be announced at least 14 days before they take effect.
Privacy questions: privacy@artificane.com.