Increation uses what it needs to work, plus Google Analytics and Meta's advertising cookies.
Cookies#
| Name | Set by | Purpose | Lasts |
|---|---|---|---|
sb-<project>-auth-token (may be split into .0, .1, …, plus -code-verifier while signing in) | Supabase, our sign-in provider | Keeps you signed in | Until you sign out, or up to 400 days |
inc_signin_from | Increation | Returns you to the page you were on after signing in | 1 hour |
inc_signin_utm | Increation | The campaign tags on the link that brought you, if any, kept while you sign in so your new account records which post or ad it came from | 1 hour |
inc_src | Increation | Which of our landing pages you came from, recorded on a new account | 7 days |
inc_ft | Increation | The campaign tags on the link to the first of our landing pages you visited, so a new account records which ad brought you. Never overwritten | 90 days |
studio_key | Increation | Only set if you open a staff access link. Most visitors never get it | 90 days |
admin_view | Increation | Staff only: shows the site as a regular user sees it | 30 days |
increation-mode, increation-theme, increation-transparency, increation-motion, increation-autoplay, increation-ui-sounds, inc_mt | Increation | Your settings and screen choices (Chat or Studio, appearance, reduced motion, video autoplay, sounds) | 1 year |
increation-stage, inc-lib-*, inc-stage-*, inc-pj-* | Increation | Your screen size and the layout you chose, so pages open in that layout | 1 year |
__stripe_mid, __stripe_sid | Stripe, our payment processor | Fraud prevention. Only set when you open the payment form | 1 year; 30 minutes |
increation-consent | Increation | Remembers whether you accepted, declined or opted out of Google Analytics and Meta advertising | 1 year |
inc_signup | Increation | Counts one new sign-up and how you signed up. Deleted as soon as it's read | Up to 10 minutes |
_ga, _ga_<ID> | Google Analytics | Counts visitors and the pages they use. Only set if analytics is on for you | 2 years |
_fbp | Meta Pixel | Identifies your browser to Meta to measure our ads. Only set if advertising is on for you | 90 days |
_fbc | Increation and Meta Pixel | Remembers which Meta ad you clicked, if any. Only set if advertising is on for you | 90 days |
inc_meta_lead | Increation | Reports one new sign-up to Meta. Deleted as soon as it's read | Up to 10 minutes |
Only the Google Analytics and Meta cookies track visits. The others are strictly necessary or only store your own choices, so we don't ask before setting them.
When you choose Google or Apple to sign in, you go to their sign-in page, and they may set their own cookies there under their own policies.
Other browser storage#
| Key | Type | Purpose | Lasts |
|---|---|---|---|
studio_draft_prompt | Session and local storage | Keeps what you typed and dropped before signing in, so it's still there afterwards | Removed once read; ignored after 1 hour |
increation-tools | IndexedDB | Keeps a photo you drop on a tool page before signing in. It never leaves your browser until you sign in | Removed once read; ignored after 1 hour |
inc_anon | Local storage | A random ID that counts the steps of a visit to our tool pages, on our own servers. In the EU, the EEA and the UK it's only set after you accept analytics | Until you clear your browser's site data |
inc_utm | Session storage | The campaign tags on the link that brought you to Increation, if any | Until you close the tab |
inc_meta_purchased | Local storage | Remembers which purchases were already reported to Meta, so a reload doesn't count one twice | Until you clear site data |
increation:*, increation-*, inc.*, creator.*, studio.*, first_run_*, warm:* | Local and session storage | Your last prompt and model, settings, which hints you've seen, and copies of your own screens so they load faster | Session storage until you close the tab; local storage until you clear site data |
Analytics#
We use Google Analytics, through Google Tag Manager, to count visits, pages viewed, sign-ups and purchases, with your device, browser, approximate location and the link that brought you. It never receives your email, name, prompts or anything you make.
In the EU, the EEA and the UK, Google Analytics stays off until you accept it on the banner. You can change your choice at any time.
Advertising#
We advertise on Facebook and Instagram. To measure those ads we use the Meta Pixel in your browser and Meta's Conversions API from our servers. They tell Meta when you view a page, create an account, or buy a plan or credits. The Pixel never receives your email or account ID. Our servers send those to Meta only hashed. The Privacy Policy has the details.
In the EU, the EEA and the UK, none of this happens until you accept it on the banner. You can change your choice at any time.
California#
California residents have the right to opt out of the sale or sharing of their personal information. Google Analytics and our Meta advertising may count as sharing. To opt out, use "Do Not Sell or Share My Personal Information" in the site footer, or turn on Global Privacy Control in your browser, which we honour automatically.
Your choices#
You can block or delete cookies and site data in your browser settings. If you block the sign-in cookie, you won't be able to sign in.