This Cookie Policy explains how Intrect uses cookies and similar technologies on the ArtifactNet dashboard (app.intrect.io) and demo pages.
Cookies are small text files stored on your device when you visit a website. They allow the site to remember your actions and preferences over time.
| Name | Purpose | Duration |
|---|---|---|
session | FastAPI session middleware (login state) | Session |
intrect_session | HttpOnly session cookie for signed-in requests (Secure; SameSite=Lax; Domain=.intrect.io) | 24 hours |
| Google OAuth state | CSRF protection during login flow | 15 minutes |
| Name | Purpose | Duration |
|---|---|---|
theme | Dashboard light/dark mode preference | 1 year |
locale | Language preference | 1 year |
The website, dashboard and demo pages load Google Analytics 4
as a direct tag, which sets Google's analytics cookies (_ga,
_ga_<id>) on your device, typically for up to two years. The pages
declare consent defaults for it: analytics storage is granted, while advertising
storage, ad user data and ad personalisation are denied. Measurement is linked
across intrect.io, app.intrect.io, demo.intrect.io and try.intrect.io so one visit
is not counted several times.
Intrect also sets intrect_attribution_v1 for up to 90 days. It stores
an anonymous attribution identifier, the first and most recent Intrect landing
path, referrer hostname, bounded campaign labels and the kind (not the value) of
an advertising click identifier. It lets a checkout or successful installer
download retain the visit that led to it after you move between Intrect subdomains.
The download log receives only the anonymous attribution identifier, not the
cookie's campaign fields. It does not store full referrer URLs,
email addresses, filenames or payment details.
If you create an account, the bounded acquisition snapshot and the current Google Analytics client/session identifiers are copied to that account record so we can measure signup, first use and purchase as one funnel. The account copy is kept until you delete the account; later visits do not overwrite its original signup attribution.
When an Intrect payment completes (an ArtifactNet plan or top-up, plug-in licence, or Clean Audio top-up), Intrect also sends Google Analytics a server-confirmed purchase measurement and delivery marker, refund measurement and marker for each approved Paddle refund adjustment, and bounded adjustment, transaction and subscription lifecycle markers. These contain the Paddle transaction/event/adjustment identifiers, product category, status, currency, amount, tax and the bounded analytics/attribution identifiers above. They contain no email address, card data or raw Paddle payload. Each retry record is kept for no more than 400 days, whether delivery succeeds or fails.
Cloudflare Web Analytics runs on the same pages. It is cookieless: it measures page views and performance without storing anything on your device and without identifying you across sites.
Aggregate API metrics are collected server-side via Prometheus in addition, and those do not involve client cookies.
We do not serve advertising and do not use advertising cookies.
When you authenticate via Google OAuth, Google may set cookies on
accounts.google.com. Google Analytics, loaded as a direct tag from
www.googletagmanager.com, set the analytics cookies described in 2.3.
These Google services are governed by
Google's Privacy Policy.
You can control or delete cookies through your browser settings. Disabling necessary cookies will prevent you from logging in.
If we add new cookies, we will update this Policy and announce changes on the dashboard.