Cookie Settings

Chatter Genius uses cookies to secure our platform, orchestrate AI Agents, and understand how you use our site. Strictly necessary cookies are always active to ensure security and functionality. Optional cookies (analytics) help us improve the experience and are set only with your consent.

Effective date: 29 November 2025 | Last updated: 29 November 2025

What are cookies?

Cookies are small text files placed on your device by your web browser. We use cookies, local storage, and session storage to keep you signed in, remember your preferences (such as dashboard sidebar state and consent choices), support verification and checkout-return flows, and collect aggregated usage statistics that help us improve the platform.

How we classify cookies

Strictly necessary — Required for core functionality such as authentication and session continuity, CSRF protection, verification flows, privacy-preference storage, and form processing. These cannot be switched off.
Performance & analytics (optional) — Help us measure site performance, including visitor counts, page load times, and navigation patterns. We currently use Google Analytics 4 (property ID G-JC94PK50PJ) for this purpose. These cookies are set only with your explicit consent.
Essential functionality — Remembers choices required to honor your privacy preferences, including cookie consent. This storage remains active so the Website can apply your choices. Any non-essential functional storage will require consent before it is used.
Advertising — We do not currently use targeting or advertising cookies on our marketing site or within the platform. If this changes, we will update this policy and prompt you for consent before any such cookies are placed.

Specific cookies we use

The following table describes the primary cookies and storage mechanisms used across the Website and Platform:

Auth.js session cookie (strictly necessary) — An encrypted JWE stored in an HTTP-only cookie by the signed-in web application. It contains the backend access and refresh credentials used by the server-side session; the access token is not stored directly in local storage. Backend access tokens are valid for 30 minutes and are refreshed while an eligible session remains active. The current Auth.js configuration uses its default session-cookie maximum age of up to 30 days, subject to sign-out and invalidation; the backend refresh-token record expires after at most 7 days, so the session can become unusable earlier.
Backend refresh-token record (strictly necessary) — A SHA-256 hash of the rotating refresh token is kept in Redis for up to 7 days, unless it is revoked or rotated earlier. It is used to issue a new access token without requiring re-authentication.
cg_phone_enrollment (strictly necessary) — An HTTP-only, SameSite Strict cookie holding a phone-enrollment challenge for up to 10 minutes.
sidebar_state (strictly necessary) — Stores whether the signed-in dashboard sidebar is expanded or collapsed for 7 days.
cg:auth-flow (strictly necessary) — Session-storage data used to pass an email address and phone number between registration and verification screens in the current browser tab. It is cleared by the flow or when the tab session ends.
Phone-verification marker (strictly necessary) — A local storage marker whose key identifies the verified email address and phone number. It remains until the browser’s site storage is cleared.
pending_plan_name (strictly necessary) — Session-storage data used to reconcile a selected plan after a checkout or subscription return. It is cleared after use or when the tab session ends.
Consent preferences (strictly necessary) — A local storage entry (cg_cookie_preferences) that records your cookie consent choices. Persists until you update your preferences or clear storage.
Google Analytics (_ga, _ga_*) (analytics, optional) — Used to distinguish unique visitors and track session engagement. Set by Google Analytics 4 and governed by Google's Privacy Policy. These cookies are only placed when you grant analytics consent.

Platform service cookies (signed-in users)

When you log in to the Chatter Genius platform (e.g., to configure AI Agents, manage knowledge bases, launch workflows, or review analytics), we set specific strictly necessary cookies and storage entries. These maintain your secure session through an encrypted Auth.js cookie containing backend RS256-signed credentials, manage CSRF protection, store verification-flow state, remember the dashboard sidebar, and reconcile checkout returns. Disabling these via browser settings will prevent parts of the application from functioning correctly.

Your choices and controls

Consent banner — Use the Manage Cookie Preferences button at the top of this page to update your choices at any time. Your preferences take effect immediately.
Browser settings — You can block or delete cookies via your browser settings, though this may prevent essential site features from functioning (e.g., authentication, form submissions).
Global Privacy Control (GPC) — We honor valid GPC signals as a request to opt out of optional analytics processing. When a GPC signal is detected, analytics cookies are not placed.
Do Not Track (DNT) — While there is no industry consensus on DNT, we treat it in the same manner as GPC when detected.

Third-party providers

We use the following trusted service providers that may place cookies or process data on our behalf:

Google Analytics 4 — Website usage analytics (optional, consent-gated). Data is processed by Google LLC under their Privacy Policy.
Stripe — Payment processing and billing portal. Stripe may set strictly necessary cookies during checkout sessions. See Stripe's Privacy Policy.
Google Fonts and Google Hosted Libraries — Font files and the WebFont loader used by every marketing page. These assets load before an analytics-consent choice and send standard browser request data, including IP address and User-Agent, to Google. See Google’s Privacy Policy.
Amazon CloudFront — Delivers the hosted jQuery dependency used by the marketing Website. CloudFront receives standard browser request data when that script loads. See AWS’s Privacy Notice.
Google Maps Platform and Google Places — Signed-in profile features use address autocomplete and map embeds. Address queries and full saved addresses may be sent to Google, and embedded Google content may use provider-controlled cookies or similar storage. See Google’s Privacy Policy.

Each provider processes data under its own terms and privacy commitments. Review the linked notices for details about provider-specific processing and controls.

Changes to this notice

We may update this page to reflect changes in our technology, cookie practices, or legal requirements. Material changes will be highlighted in our consent banner. We recommend reviewing this page periodically.

Contact

Questions about our cookie practices? Email privacy@chattergenius.ai. For full details on how we collect, use, and protect your data, please see our Privacy Policy.

Accessibility

If you use assistive technologies and need help managing your cookie preferences, please contact support@chattergenius.ai and we will assist you promptly.