This page lists the cookies and similar browser storage ClipAI sets, grouped by purpose. It supplements our Privacy Policy, which covers what we collect and why in full - see that page for the full list of data processors.
Essential
Required for the app to function. These cannot be turned off without breaking core features.
- authjs.session-token (and its
__Secure-variant in production) - keeps you signed in. Set by NextAuth on login. - ref - remembers a referral code from an invite link for the duration of signup.
- new_signup - a short-lived (30 minute) marker used right after account creation.
- social_oauth_nonce_<platform> - a short-lived CSRF nonce set while you connect a social account (TikTok, Instagram, YouTube, LinkedIn, X, Threads, Bluesky), then cleared.
- social_oauth_pkce_<platform> and social_connect_return_<platform> (10 minutes) - while you connect a social account, the sign-in verifier the platform requires and the app page to return to afterwards.
- clipai_app_view (browser session) - set when the iOS app opens one of our web pages, so the page shows the app layout.
Functional
Remember a preference or an experiment assignment. Not required, but disabling them degrades the experience slightly.
- landing_locale (60 days, httpOnly) - remembers a localized page’s language.
- app_locale and app_tz (1 year) - the language you chose for the app and your browser’s time zone, so dates and times show in your local time.
- clipai-cookie-consent - browser local storage (not a cookie) remembering whether you accepted or declined analytics and support-chat cookies.
- consent_region (30 days) - whether your region requires consent before any analytics loads (set from your country, which is not stored).
Analytics
Help us understand how the site is used. PostHog, Google Analytics and DataFast load only with your consent: in the EU, EEA, UK and Switzerland they stay off until you click Accept; elsewhere they run unless you click Decline, and a browser sending a Global Privacy Control signal is treated as a decline. See the Third-Party Processors section of the Privacy Policy for what each provider receives.
- PostHog - product analytics cookies/local storage (e.g. distinct-id) tied to your account once you are signed in. Also powers session replay, with typed input masked before it leaves your browser. On signed-in app pages and free-tool results all on-screen text is masked too, and settings, billing and password-reset pages are not recorded.
- Google Analytics (GA4) - standard
_ga/_gid-style cookies tied to a per-browser identifier. - DataFast - page-view and traffic-source analytics. Sets first-party cookies
datafast_visitor_id(identifies your browser across visits) anddatafast_session_id(groups one visit).
Support widget
- Intercom - the in-app support/chat widget sets its own cookies (e.g.
intercom-id-*,intercom-session-*) to keep a conversation attached to your browser session while the widget is open. It follows the same consent choice as analytics.
Fonts
All fonts, including the caption typefaces, are served from our own servers. No font request goes to Google or another third party.
Your choices
Accept or decline analytics and the support widget in the cookie banner. To change your answer later:
The essential cookies above are required to sign in and use the app and cannot be disabled from within ClipAI. You can block or delete cookies in your browser’s settings at any time - doing so may sign you out or reset experiment/locale preferences. Analytics and the support widget can also be blocked at the browser or extension level without affecting core functionality.
Changes
We may update this policy as we add or remove providers. Material changes will be reflected by the “Last updated” date above.
Contact
Questions about cookies or tracking: hello@clipai.online.