Cookie Policy | SpacesAI

1. What are cookies?

Cookies are small text files placed on your device by a website. They are widely used to make websites work, remember your preferences, and provide information to site owners.

2. Cookies we use

SpacesAI uses the following cookies and localStorage entries:

Name	Storage	Purpose	Expires
`access_token`	HttpOnly cookie	Authenticates your session. Contains a signed JWT that identifies your account.	7 days (deleted on logout)
`cookie_consent`	localStorage	Stores your analytics cookie preference (accepted or declined) so the banner is not shown again.	1 year
`_ga`	Cookie	Google Analytics: distinguishes unique users via a randomly generated ID. Only set after you accept analytics cookies.	2 years
`_ga_*`	Cookie	Google Analytics: stores session state. Only set after you accept analytics cookies.	2 years
`personalization_id`	Cookie	X (Twitter) Pixel: uniquely identifies the browser for ad measurement and conversion tracking. Only set after you accept analytics cookies.	2 years
`muc_ads`	Cookie	X (Twitter) Pixel: used for ad targeting and conversion attribution. Only set after you accept analytics cookies.	2 years

3. Cookie attributes

The access_token cookie is configured with the following security attributes:

HttpOnly — cannot be read by JavaScript, protecting against XSS attacks.
Secure — only transmitted over HTTPS in production.
SameSite=Lax — not sent on cross-site requests, reducing CSRF risk.
Path=/ — scoped to the entire domain.

4. Analytics cookies

SpacesAI uses Google Analytics 4 and the X (Twitter) Pixel to understand how visitors use the service and to measure ad campaign performance.

Analytics and advertising cookies are only set after you explicitly accept them via the cookie banner.
We use Google Consent Mode v2: if you decline, the GA script loads in a restricted mode that sends no user-level data and sets no cookies.
The X Pixel is not loaded at all if you decline analytics cookies. When loaded, it tracks page views and conversion events to measure the effectiveness of our X Ads campaigns.
Google Analytics data is processed by Google LLC under their Privacy Policy.
X Pixel data is processed by X Corp. under their Privacy Policy.

You can manage your analytics preference at any time in Section 7 below.

5. Third-party cookies

Google Analytics — sets _ga and _ga_* cookies only when analytics consent is granted. See Google's Cookie Policy.

X (Twitter) Pixel — sets personalization_id and muc_ads cookies only when analytics consent is granted. See X's Privacy Policy.

Stripe — payment flow is loaded on a separate Stripe-hosted page during checkout; any cookies set there are governed by Stripe's Cookie Policy.

6. How to control or disable cookies

You can manage or delete cookies through your browser settings:

Chrome — Settings → Privacy and security → Cookies and other site data.
Firefox — Settings → Privacy & Security → Cookies and Site Data.
Safari — Preferences → Privacy → Manage Website Data.
Edge — Settings → Cookies and site permissions → Cookies and site data.

Note: disabling the access_token cookie will prevent you from logging in.

7. Your consent preferences

SpacesAI uses browser localStorage for:

Theme preference — your dark/light mode setting. No personal data.
Cookie consent — your analytics preference (accepted or declined) and timestamp.

You can view and change your current analytics consent preference below:

8. Changes to this policy

We will update this page whenever we make changes to our cookie practices and revise the "Last updated" date at the top. Continued use of the service after any change constitutes acceptance of the updated policy.

9. Contact

Questions about our use of cookies: privacy@spacesai.app
General support: Contact form