Cookie Policy

Cookies are small text files that a website stores on your browser. We also use similar technologies such as local and session storage. Together they keep you signed in, remember your preferences, process payments, help us diagnose errors, and — only with your consent — measure how the site is used.

We use cookies and similar technologies to:

• Keep you signed in and maintain your session
• Remember your preferences, such as language and theme
• Process payments securely and help prevent fraud
• Detect and diagnose errors so we can improve reliability
• Measure traffic and how the site is used — only after you accept analytics cookies

Strictly necessary cookies are required for the site to work — for example, to keep you signed in and to process payments. They cannot be disabled.

Preference cookies remember settings such as your language and theme.

Analytics cookies help us understand how visitors use the site. They are set by Google Analytics and load only after you give consent through our cookie banner. Until you accept, no analytics cookies are stored.

We do not currently use advertising or marketing cookies.

Some cookies and similar technologies are set by third-party services we rely on:

• Google Analytics (Google LLC) — measures site traffic and usage. Sets cookies such as _ga. It is loaded through Google Tag Manager and runs only after you consent.
• Stripe — secure payment processing and fraud prevention.
• Supabase — authentication and session management (keeps you signed in).
• Sentry — error monitoring and session replay. It records sessions where an error occurs, plus a small random sample of sessions, to help us diagnose problems; text and input fields are masked by default.

We do not sell your data or share it with advertisers.

Some of these providers — notably Google Analytics — are based in the United States, so enabling analytics involves transferring limited, non-identifying usage data internationally. We rely on the providers’ standard contractual safeguards for these transfers. You can avoid them entirely by rejecting analytics cookies.

Analytics cookies are off by default and run only after you click Accept on our cookie banner. You can review or withdraw your analytics consent at any time — withdrawing consent immediately stops analytics and clears the related cookies.

Strictly necessary cookies (sign-in, payments) cannot be turned off, as the site would not work without them. You can also control or delete cookies through your browser settings, though blocking necessary cookies may break parts of the site.

Session cookies are deleted when you close your browser. Authentication cookies typically last up to 30 days. Google Analytics cookies (_ga) persist for up to two years unless you withdraw consent or delete them, which removes them immediately.

If you have questions about our use of cookies, contact us at privacy@copythief.ai.