Cookie Policy

Necessary authentication and security

Clerk's authentication and client storage keeps your requested login and security flow working. The __session cookie supplies the Clerk session used by the app. Local database metadata supports CSRF and session revocation; it is not an independent login credential.

The previous local-authentication mode uses mc_session with a 14-day maximum age. Production Clerk login does not use that as a substitute credential. Google sign-in and Stripe Checkout can use storage on their own domains during the flow you request, under their own notices.

Your privacy choice

We store a privacy preference to remember whether you permit Vercel Analytics and Datafast. These are separate optional services and are off before a valid affirmative choice. Refusing them must not prevent use of a purchased plan. The settings show available services; an unconfigured service remains off.

Accept all, Reject optional and Settings are available without preselected optional choices. Open Privacy settings from the site or app to change or withdraw your choice. We use the preference only to honour your choice and demonstrate it where needed, not as permission for unrelated tracking.

Optional analytics

Vercel Web Analytics provides aggregated traffic and device statistics on the public home and pricing pages after permission. Vercel describes this collection as cookie-free, with a 24-hour visitor identifier lifecycle. This is not a promise that every analytics record is erased after 24 hours.

Where enabled and permitted, Datafast uses visitor/session identifiers, including datafast_visitor_id, to recognise visits, measure safe page/app activity, show live visits and attribute subscription purchases. Its cookie-based visitor identifiers can persist across visits. The provider describes its storage and data handling in its own documentation.

We do not send form contents, credentials, customer content or unfiltered private URLs as analytics. You can refuse either service separately. A refusal is not overridden by a server-side payment event, hidden proxy or cookieless fallback.

• Vercel analytics information
• Datafast information

Changing or withdrawing permission

Withdrawal stops future optional tracking and attribution and clears the applicable first-party identifiers. It does not cancel the account or automatically erase all information already lawfully collected. Contact support@marketingapp.io for a deletion request.

If browser controls delete your preference, we ask again before optional tracking resumes. A blocked script, unavailable storage or analytics outage must not prevent login, payment or normal app use.

• Privacy Policy