Cookie Policy
Last updated: May 27, 2026
🇫🇷 French version available: Politique de Cookies
This Cookie Policy explains what cookies are, which cookies Clustea uses, and how you can control them. For more information about how we handle your personal data, see our Privacy Policy.
What Are Cookies?
Cookies are small text files placed on your device by a website when you visit it. They are widely used to make websites function, to improve performance, and to provide information to site owners. Cookies can be "session" cookies (deleted when you close your browser) or "persistent" cookies (stored for a set duration).
Categories of Cookies We Use
1. Strictly Necessary Cookies
These cookies are essential for the Service to function. They cannot be disabled. They do not require consent under applicable law.
| Cookie name | Provider | Purpose | Duration |
|---|---|---|---|
| sb-[project]-auth-token | Supabase | Stores the authenticated user session (JWT) to keep you logged in. | 1 week |
| sb-[project]-auth-token-code-verifier | Supabase | PKCE code verifier used during the OAuth login flow to prevent CSRF attacks. | Session |
2. Payment Cookies
These cookies are set by Stripe to process payments securely and prevent fraud. They are activated only when you interact with the billing or payment flow.
| Cookie name | Provider | Purpose | Duration |
|---|---|---|---|
| __stripe_mid | Stripe | Fraud prevention and payment processing; identifies the browser across sessions. | 1 year |
| __stripe_sid | Stripe | Fraud prevention; identifies the browser during a payment session. | Session |
3. Analytics Cookies
We no longer use any. Google Analytics 4 was removed from the Service on 29 August 2026, together with a product analytics tool, because both loaded before you had been asked anything. Neither was replaced. If your browser still holds cookies from those tools, it is asked to delete them on your next visit — whatever your cookie choice, since those purposes no longer exist.
4. Advertising Measurement Cookies
These cookies let us measure which Google Ads campaigns lead to a subscription. They are not strictly necessary, and they are never placed before you accept them. If you refuse, or if you have not answered yet, nothing is recorded — no click identifier, no campaign parameter, anywhere.
| Cookie name | Provider | Purpose | Duration |
|---|---|---|---|
| clustea_attr | Clustea | Advertising measurement. Holds the identifier of the Google Ads click that brought you here (gclid, wbraid or gbraid), any campaign parameters (utm_*), the landing page and the time of the click — so that a later subscription can be attributed to the campaign that produced it. Placed only with your consent. | 90 days max after the click |
| clustea_consent | Clustea | Records your choice about advertising measurement: accepted or rejected, the date of that decision, and the policy version it applied to. It contains no click identifier and no campaign parameter. Storing this preference is what lets us stop asking you on every visit. | 6 months from your last decision |
Transmission to Google. As things stand, no advertising or analytics measurement data reaches Google — not through Google Analytics, not through a browser tag, and not through our server-side conversion chain. Google Analytics and the Google Ads browser tag were removed on 29 August 2026, and server-side transmission is switched off. When we switch it on, the click identifier, the transaction identifier, the amount and the currency of a subscription will be sent to Google Ads from our servers — never from a tag in your browser — so it can attribute the conversion to the campaign. That will only ever concern accounts for which consent was given and not withdrawn.
This paragraph concerns advertising measurement only. It says nothing about our other uses of Google services, such as Search Console, which serve a different purpose.
How long consent lasts. Your choice is remembered for 6 months from your last explicit decision. Simply visiting the site never extends it. Once it expires, we ask again — and an expired refusal is never turned into acceptance. If we materially change the purpose, the data collected or the recipients, we ask again too.
Withdrawing. You can withdraw at any time below. Withdrawal deletes the attribution cookie from your browser and makes any attribution already linked to your account unusable for any future advertising processing — a purchase made after withdrawal produces no data for Google. We keep the record of what was collected, and of the withdrawal itself, as audit evidence.
Your advertising measurement choices
Current choice : …
Attribution cookie: at most 90 days after the click. Your choice is remembered for 6 months from your last decision.
How to Manage Cookies
You can control and manage cookies in several ways:
- Browser settings — most browsers allow you to refuse cookies or delete existing ones. Consult your browser's help documentation for instructions. Note: disabling strictly necessary cookies will prevent you from logging in.
Changes to This Policy
We may update this Cookie Policy when we add or remove cookies. Material changes will be communicated via the website banner or by email.
Contact
Questions about our cookie practices? Email contact@clustea.com.