Cookie Policy

Last updated: September 25, 2026

This page describes the cookies and similar technologies ShortLoom uses on shortloom.ai. It sits alongside the Privacy Policy, which explains the broader processing. The data controller is APP STUDIO, a SASU registered with the Marseille RCS under number 917 474 207 (contact: support@shortloom.ai).

What we mean by cookies

Cookies are small files stored on your device. We also use similar technologies such as localStorage, pixels, and scripts that set an identifier. In this policy, “cookies” covers all of those.

Essential cookies (always on)

These are required to run the Service. They cannot be declined without breaking sign-in, security, or the consent record itself.

Authentication. Supabase session cookies keep you signed in. Clearing them signs you out.
Consent record (shortloom_consent). Stores whether you accepted or declined optional cookies, so we do not re-prompt on every page and so server-side analytics can honour the same choice.
Language (shortloom_lang). Remembers the language you picked.
Referral and affiliate (shortloom_ref, rl_aff). Attribute a sign-up to the person or partner who referred you.
Cloudflare Turnstile. Bot check on sign-up and sign-in. Not consent-gated.
Fingerprint. Device-identification agent used as an essential anti-abuse measure to detect repeat and automated sign-ups claiming credits. Legitimate interest, not consent.

Optional cookies (only with your consent)

The cookie banner defaults to denied. Nothing in this section runs until you tap Accept. Declining keeps only the essential cookies above. We do not sell your data.

Analytics. PostHog product analytics, loaded through Google Tag Manager with consent mode denied by default.
Session replay. Microsoft Clarity and Flowsery, so we can see how a page actually behaved when something goes wrong.
Advertising. Meta and TikTok pixels, used to measure campaigns. They do not run if you decline.
Support chat. Crisp, the in-app messenger.

How to change your choice

Withdrawing consent must be as easy as giving it. Use the cookie banner when it is shown, tap in the footer of any marketing page, or open Settings → Cookie preferences once you are signed in. Choosing Decline after having Accepted stops tracking rather than only blocking future inits.

How long they last

The consent cookie is stored for one year. Referral attribution lasts 30 days. Affiliate attribution lasts 60 days. Session cookies last for the sign-in session. Optional vendor cookies follow each vendor's own retention; declining prevents them from being set.

Further detail

Categories of personal data, international transfers, your GDPR rights, and how to request deletion are in the Privacy Policy. Questions: support@shortloom.ai.