In short
We set a few first-party cookies: one keeps you signed in, one remembers your language, and three record how you first found us. Our analytics use no cookies. We use no advertising or cross-site tracking cookies. Stripe sets its own cookies on its checkout page.
What cookies are
Cookies are small text files that a website stores in your browser and reads back on later visits. Similar browser storage, such as local storage, works the same way, and this policy covers it too.
Cookies we set
| Cookie | What it does | How long it lasts |
|---|---|---|
better-auth.session_token | Keeps you signed in. Strictly necessary: without it you cannot use your account. On HTTPS the name starts with __Secure-. | Up to 7 days, renewed while you use the site |
Other better-auth.* cookies | Short-lived security cookies set while you sign in, for example to protect a Google sign-in from tampering. Strictly necessary. | Minutes to the length of the session |
PARAGLIDE_LOCALE | Remembers the language you chose (English or Chinese). | 400 days |
app_first_locale, app_first_utm_source, app_first_referrer | Record the language, the utm_source campaign tag and the referring website’s host name (for example google.com) of your first visit. If you sign up, these values are saved with your account so we know which channels bring new users. They are never shared with advertisers. | 90 days; written once and never overwritten |
Local storage
The tools also keep a few small values in your browser's local storage — for example the layer model you picked last and the ID of a run that is still in progress, so that reloading the page doesn't lose it. These values stay in your browser and are not sent to us as cookies.
Analytics without cookies
We measure traffic with Plausible Analytics. It sets no cookies, stores nothing on your device, doesn't track you across websites and doesn't build a profile of you. It reports only aggregate numbers, such as page views, referring sites, countries and device types.
Third-party cookies
- Stripe. When you buy credits or a plan, checkout happens on Stripe's secure payment page, which sets Stripe's own cookies to process the payment and prevent fraud. Stripe explains them in its cookie policy.
- Google. If Google sign-in is offered and you use it, Google's sign-in page uses Google's cookies. Where Google's one-tap sign-in prompt is enabled, it is loaded from Google for signed-out visitors and works with the cookies of your Google account.
- We use no advertising cookies, social-media pixels or cross-site tracking.
Managing cookies
You can block or delete cookies in your browser settings at any time. Blocking the session cookie means you can't sign in. Blocking the others only means the site forgets your language choice, or we don't learn how you first found us.
Changes and contact
If we add or change cookies, we'll update this page and the date at the top. Questions: support@images2layers.com. See also the privacy policy.