Skip to content

Cookie and Tracking Notice

Effective from [EFFECTIVE DATE]

Exactly which cookies and browser storage Generatifiy uses, what for, and what it does not do: no advertising cookies, no analytics cookies, no tracking of visitors.

Draft, pending completion and legal review

This document is a draft and is not yet in force. Details shown in [SQUARE BRACKETS] are still to be filled in, and the text has not been reviewed by a lawyer. It is not legal advice.

1. In short

  • We use a small number of first-party cookies and storage entries that the service needs to work. They need no consent, and there is no cookie banner because there is nothing optional to ask about.
  • We set no advertising or analytics cookies and use no third-party trackers, pixels or social-media plug-ins.
  • Visitors who are not signed in are not measured at all.

2. What is stored in your browser

NameKindPurposeLifetime
Namebetter-auth.session_token or __Secure-better-auth.session_tokenKindCookie, first-party, HttpOnly, SameSite=Lax (Secure on HTTPS)PurposeKeeps you signed in. Set when you sign in or sign up; the second name is the one used on the live siteLifetimeUp to 7 days; extended to 7 days again when you use the service more than 24 hours after it was last extended; removed when you sign out
NameNEXT_LOCALEKindCookie, first-party, SameSite=LaxPurposeRemembers the language you picked. Set only when you change the language; otherwise your browser's language is used and nothing is storedLifetime365 days
NamethemeKindlocalStorage entryPurposeRemembers the light, dark or system theme you picked. Never sent to our serversLifetimeUntil you clear your browser storage
Namebetter-auth.messageKindlocalStorage entryPurposeLets your other open tabs notice that you signed in, signed out or changed your account, so they do not show stale pages. Holds the kind of change, a random tab identifier and a time; no account data. Never sent to our serversLifetimeUntil you clear your browser storage; overwritten at each change
Namegeneratifiy.recovery-planKindlocalStorage entryPurposeRemembers the plan you had chosen when you asked for a password reset link, so that signing in after the reset leads to that plan. Set only when you ask for a link after choosing a plan. Holds the plan's name and a time; never sent to our serversLifetimeRemoved when you set the new password in the same browser; ignored after 60 minutes, and it then stays until it is overwritten or you clear your browser storage

If you sign in with Google, a few short-lived first-party cookies carry the sign-in through the redirect to Google and back; they expire within ten minutes.

These entries are strictly necessary for functions you ask for (signing in and staying signed in across tabs, your language, your theme, continuing to the plan you chose), which is why the law does not require consent for them.

3. Analytics without cookies

  • On public pages (the landing page, the sign-in page and these legal pages) no analytics code is loaded and no analytics request is made.
  • Inside the app, for signed-in users, we record product usage with our analytics provider (PostHog). It runs without cookies and without any device storage: its state is kept in memory and is gone when you close or reload the page.
  • It runs only while analytics is switched on for your account. To switch it off, go to Account and set Product analytics to Off. It stops at once in every open tab of that browser; once the choice is saved it also stops on our servers, and your other devices follow at their next page load or when their tab comes back into view. The tabs tell each other through the browser itself; nothing is stored for it. You can switch it back on whenever you like.
  • If your browser sends the Global Privacy Control signal and you have not chosen yourself, analytics stays off until you switch it on.

What is recorded and why is described in the Privacy Policy.

4. Other sites

When you buy or manage a plan you leave our site for Polar's checkout or customer portal. Cookies set there, on Polar's own domain, are Polar's and are covered by Polar's policies. The same applies to Google's pages if you sign in with Google. We embed no third-party content that could set cookies on our pages.

5. Your choices

  • You can delete or block cookies in your browser settings. Without the session cookie you cannot stay signed in.
  • You can switch product analytics off in Account, as described above.
  • Questions: privacy@generatifiy.com.