Cookies
Cookies we set.
One first-party cookie, for sign-in. No marketing pixel, no consent wall for analytics we do not run. Updated .
Strictly necessary
| Name | Why | How long |
|---|---|---|
xaish_session | HttpOnly, SameSite=Lax JWT so we know who you are. Secure flag is on when the service is served over HTTPS. Not readable by page JavaScript. | 14 days, or until you sign out |
That cookie is required for authenticated pages (account, billing, subscriber tools). You can block it in the browser; you will not stay signed in. We do not need a consent banner for this cookie alone.
What we do not set
- No advertising or retargeting cookies.
- No third-party analytics SDK on the marketing site.
- No browser Session Replay. If server-side Sentry is enabled, it does not set a first-party marketing cookie.
Third parties
Stripe Checkout and the Stripe customer portal run on stripe.com and set their own cookies when you subscribe. Anthropic is called from our servers, not your browser. External wallets (Phantom, Solflare, Backpack) are their products.