Cookie Policy
Last updated: May 25, 2026
What Are Cookies?
Cookies are small text files stored on your device when you visit a website. We use them to keep you signed in, remember your choices, and understand how the site is used.
Cookies We Set Directly
- access_token: httpOnly, Secure, SameSite=Lax, 15 minutes — JWT access token used for API authentication.
- refresh_token: httpOnly, Secure, SameSite=Lax, 30 days — renews access without re-login.
- terms_accepted: Secure, SameSite=Strict, 365 days — confirms you accepted the latest Terms of Service.
- tarteaucitron: stores your consent choices for analytics and tracking cookies.
The first three are essential — they enable sign-in, security, and terms acceptance, and the site will not work properly without them.
Third-Party Cookies
Some third-party services set their own cookies. Apart from PostHog, analytics and marketing trackers load only after you accept analytics cookies in the consent banner (TarteAuCitron):
- PostHog (EU): first-party product analytics (localStorage and cookies); loaded by default as it processes only first-party usage signals.
- Google Analytics, Tag Manager & Ads: traffic analytics, tag orchestration, and conversion tracking. Consent-gated.
- Facebook Pixel: ad attribution. Consent-gated.
- Yandex Metrica: traffic analytics. Consent-gated.
- Stripe: set on Stripe-hosted checkout pages (not on alphai.io itself) for payment processing.
- Google OAuth: set during the Google sign-in flow.
Managing Cookies
You can change your analytics and marketing consent at any time through the consent banner, and block or delete cookies in your browser settings — Chrome, Firefox, Safari, and Edge each expose this under their Privacy / Cookies menu. Disabling essential cookies will break sign-in and other core features.
Retention
Session cookies are cleared when you close your browser. Persistent cookies last from 15 minutes (access token) up to roughly 24 months (analytics), as noted above.
Contact & Updates
Questions about this Cookie Policy? Email info@alphai.io. We may update this policy from time to time and will post any changes here.