We don't use tracking cookies.
Last updated: May 13, 2026. This page lists every cookie and every local-storage key the marketing site and product touch — what it's for, who sets it, how long it lives, and how to opt out.
Marketing site (priorstudio.ai)
| Key | Type | Set by | Purpose | Lifetime |
|---|---|---|---|---|
| priorstudio.cookie-consent.v1 | localStorage | PriorStudio | Remembers that you dismissed the cookie banner. Stored as a JSON object with timestamp. | Until you clear it. |
| That's it. No analytics, no advertising, no third-party trackers. | ||||
We also load Google Fonts CSS + WOFF2 files from fonts.googleapis.com and fonts.gstatic.com. Google doesn't set cookies on those requests but does receive your IP address from your browser as part of the HTTP request. To opt out, block those two hostnames in your browser; the site falls back to system fonts and stays fully readable.
Hosted product (app.priorstudio.ai)
| Key | Type | Set by | Purpose | Lifetime |
|---|---|---|---|---|
| priorstudio.accessToken | localStorage | PriorStudio | JWT access token issued at login. Required to authenticate API requests. | 15 minutes (token expiry). |
| priorstudio.refreshToken | localStorage | PriorStudio | Long-lived refresh token used to get fresh access tokens. | 30 days, or until logout. |
| priorstudio.activeOrgId | localStorage | PriorStudio | Remembers which workspace you last viewed so we open you back into it. | Until you switch. |
All three are strictly necessary for the product to function: you can't be authenticated without the tokens, and the workspace selector needs a hint to know where to land. There are no analytics cookies in the product either.
Opting out
You have a few options:
- Browser settings — most browsers let you block localStorage for specific sites. The marketing site still works (you'll see the banner on every visit). The product can't function without it.
- Block Google Fonts — add
fonts.googleapis.comandfonts.gstatic.comto your browser's content blocker. The site falls back to system fonts. - Delete your account — removes every server-side cookie / session record we have for you. See the Privacy policy for the timing.
Why we don't track
We've deliberately avoided analytics, advertising, and behavioural tracking on this site. Three reasons: it's the right default; we don't have a use for the data that justifies the privacy cost; and the people we want to reach (researchers, ML platform teams) are exactly the people who notice.
If we ever add server-side analytics for product-improvement (aggregated, non-identifying), we'll list it here and email registered users in advance.
Contact
Questions about this notice or anything cookie-shaped: privacy@profitops.ai.