creativital.space

Cookie preferences (draft)

Draft, pending legal review

This text describes how Creativital works today, but it has not yet been reviewed by a lawyer. Parts in [square brackets] still need to be filled in. If anything here is unclear, write to support@creativital.space.

This page lists every cookie and browser storage item this site can use. Optional ones are only set after you agree in the cookie banner, and you can change your mind at any time with "Cookie settings" in the site footer (or Settings, then Privacy & data, when signed in). If the operator has not enabled analytics or advertising measurement, no banner is shown and only the necessary items below are used.

Strictly necessary (always on)

  • Session cookie (better-auth.session_token, httpOnly, up to 14 days): keeps you signed in. Only set when you sign in.
  • cv_consent (6 months): remembers your cookie choice so we do not ask on every page. Contains only the choice and its date.
  • Language (cv-locale, 1 year): remembers the site language you picked in the language switcher. Only set when you pick one.
  • Theme (cv-theme, browser local storage, no expiry, never sent to us): remembers light or dark mode if you pick one.

Analytics (only with your consent)

  • Google Analytics 4 (_ga, _ga_*, up to 2 years), loaded through Google Tag Manager: counts visits and sign-up steps. Never includes idea text, source URLs or wellbeing data. When you are signed in and agreed, key steps (sign-up, trial, purchase) are also sent from our server to Google Analytics with a pseudonymous id.

Advertising measurement (only with your consent)

  • Google Ads (_gcl_*, 90 days): tells Google that a visit from its ad led to a sign-up, trial or purchase.
  • Meta Pixel (_fbp, _fbc, 90 days): the same for Facebook and Instagram ads. With this consent our server also sends these conversions to Meta's Conversions API, including your email address as a one-way hash (SHA-256), so Meta can match the conversion to the ad.
  • After a checkout, the ids of conversions already reported are kept in this tab's sessionStorage so a page refresh is not counted twice.
  • We do not use these tools to personalise ads on this site. Google Consent Mode is set to "denied" until you agree.

Campaign attribution

  • cv_attr (first-party, 90 days): which campaign brought you here the first time (utm parameters, Google/Meta click ids, referring site, landing page). Only written after you allow analytics or advertising; Google and Meta identifiers inside it follow the matching category. It is stored with your account when you sign up, so we can tell which campaigns bring paying customers.
  • Before you choose, the same data is kept only in this browser tab (sessionStorage, deleted when the tab closes, never sent to us). If you decline, it is discarded.

Withdrawing consent

Choosing "Necessary only" or switching a category off stops the related tags, deletes their cookies on this site and stops the server-side sending described above for your account. Data already sent to Google or Meta is handled under their terms [link to the operator's processor/joint-controller arrangement still to be added].