Cookie Policy
Last updated 2026-08-06
This document explains which cookies and similar technologies Creo (https://contentfai.xyz) uses and how to control them.
1. What we use
We only use technologies the service cannot work without, or that make it work better: authentication cookies and browser local storage for your interface preferences.
Full inventory:
| Name | Category | Purpose | Retention |
|---|---|---|---|
| sb-*-auth-token | Strictly necessary | Stores your sign-in session. Without it you cannot stay logged in. | Until you sign out |
| sidebar_state | Functional | Remembers whether the sidebar is collapsed. | 7 days |
| NEXT_LOCALE | Functional | Remembers your selected interface language. | 1 year |
| loop-theme, loop_lang (localStorage) | Functional | Remember your selected theme and the language used on public pages. | Until you clear browser data |
| activeWorkspaceId, activeProjectId (localStorage) | Functional | Remember your last active workspace and project. | Until you clear browser data |
| cf_invite_token, cf_invite (localStorage) | Strictly necessary | Carry an invite code from the link click through to sign-up. | Until the invite is used |
| clever_ai_recent_avatars, ugc:recentModels (localStorage) | Functional | Recently used avatars and models, so you don't have to search again. | Until you clear browser data |
2. What we do NOT use
We do not use advertising or marketing trackers, we do not embed social-network pixels, and we do not connect third-party web analytics. We do not build advertising profiles and do not share behavioural data with ad networks.
That is why there is no tracking-preferences banner on this site: there is nothing to switch off. If analytics are introduced, we will update this document and ask for your consent before they go live.
3. Legal bases
Strictly necessary cookies (sign-in session, invite code) rely on legitimate interests and do not require consent, because the service you requested cannot technically work without them.
Functional entries (theme, sidebar state, recent items) are stored locally in your browser and serve your convenience only.
4. How to control them
- Your browser settings let you delete or block cookies for an individual site. Note that blocking the authentication cookie makes signing in impossible.
- Clearing site data in your browser also removes localStorage entries — the interface returns to its defaults.
- Public pages load external fonts from Google Fonts servers; that use is governed by Google's privacy policy.
- Pages include Telegram's official script (telegram.org), required for Telegram Mini App sign-in. It is loaded from Telegram's servers, which therefore learn your IP address.
5. Changes and contact
If the set of technologies changes, we will update this document and its revision date. Questions: [ EMAIL ].