Cookies
Cookie Policy.
Every cookie and storage key the site and app set, what each is for, how long it lasts, and how the banner choice works.
At a glance
Analytics by choice, sign-in by necessity.
Accept
Google Analytics runs with cookies.
Decline
Analytics never loads and you are not asked again.
Not yet answered
Cookieless, anonymous signals only. No identifier on your device.
In full
Seven sections, every cookie listed.
1. What this covers
This policy explains the cookies and similar browser storage used on www.creatorsenseai.com and in the CreatorSense app by CreatorSense, a business name of Matt Orchard (sole trader), ABN 65 815 285 275, Sydney NSW, Australia. Cookies are small files a site stores in your browser. "Browser storage" (local storage) works in a similar way.
2. The banner and your choice
On your first visit, a banner says: "We use cookies to analyse traffic, so we can see which pages are worth keeping. No personal data is sold." with two buttons, Decline and Accept.
- Accept: Google Analytics runs with cookies.
- Decline: Google Analytics never loads, nothing is sent to it, and you are not asked again.
- No answer yet: Google Analytics runs in its cookieless consent mode. It receives an anonymous page-view or action signal with no cookie and no identifier stored on your device. Advertising storage and personalisation are always off.
The same choice applies in the app, which is on the same address. To change your mind, clear this site's data in your browser; the banner appears again on your next visit.
3. Strictly necessary cookies (app sign-in)
Set when you sign in. The app does not work without them, so they are not covered by the banner.
| Name | Purpose | Lasts |
|---|---|---|
access_token | Keeps you signed in to the app (HTTP-only) | 60 minutes |
refresh_token | Renews your session without a new login (HTTP-only) | 7 days, or 30 days with "remember me" or Google sign-in |
session_id | Identifies your sign-in session so you can see and end it (HTTP-only) | Same as refresh_token |
csrf_token | Protects forms and actions against cross-site request forgery | 60 minutes |
impersonating | Shows a banner while CreatorSense support is viewing an account at the owner's request | For the support session only |
4. Referral and preference storage
First party only: nothing here is sent to a third party.
| Name | Purpose | Lasts |
|---|---|---|
cs_ref (cookie and browser storage) | Holds the referral code from a referral link you followed, so the referrer can be credited when you sign up. First party; set only if you open a referral link. | 60 days |
cs_src (browser storage) | Holds campaign tags (utm values) and the referring website's host name from your first visit, sent to us once when you sign up. | 60 days |
cookieConsent (browser storage) | Remembers whether you accepted or declined analytics cookies. | Until you clear site data |
| App preferences (browser storage) | Interface settings, the page to return to after login, and for the browser extensions, the sign-in session. | Until you sign out or clear site data |
5. Analytics cookies (only if you accept)
| Name | Purpose | Lasts |
|---|---|---|
_ga | Google Analytics: tells visits apart | 2 years |
_ga_<container-id> | Google Analytics: keeps session state | 2 years |
When allowed, Google Analytics records pages viewed and the referring site, approximate location from a truncated IP address (we enable IP anonymisation), browser and device type, and a few actions: copying the MCP address, clicking through to a Chrome Web Store listing, clicking a connect button, leaving for the app or login, clicking an email link, running the free leak scan and submitting its email form (the fact that it was submitted, never the address). In the app it records product steps such as signing up, creating a package, delivering a copy and running a leak check. We do not send your name, email or account id to Google Analytics, and we do not use it for advertising.
6. Other third-party services
- Google Fonts: the site loads fonts from Google, which receives your IP address and browser details to serve them.
- Cloudflare Turnstile: the login and sign-up forms run a Cloudflare bot check, which processes browser signals.
- Stripe: checkout and the billing portal run on Stripe's pages, which use Stripe's own cookies for payments and fraud prevention under Stripe's policy.
- Sign in with Google: if you use it, Google's sign-in page applies Google's cookies.
7. Managing cookies
You can block or delete cookies in your browser settings. Blocking the strictly necessary cookies stops you signing in to the app. See also the Privacy Policy.
Other legal documents: Privacy Policy · Terms of Service · Acceptable Use Policy · Refund Policy · Referral Programme Terms · Data Processing Addendum · Subprocessors · Security · Copyright Policy.
Questions
Ask us anything about cookies.
info@creatorsenseai.com · CreatorSense · Sydney NSW, Australia. We answer by email; there are no calls to book.