Cookie Policy

Cookies are small files a website stores in your browser. We use a few to run the site and a few for advertising measurement. This page lists them by name so you can see exactly what is set. It is part of our Privacy Policy.

Cookies needed to run the site

These are set by intonality.com itself and cannot be switched off without breaking the site.

• intonality_session - keeps you logged in and remembers what you are doing between pages, for example a campaign you are in the middle of submitting. Lasts about eight days from your last visit.
• XSRF-TOKEN - protects forms against cross-site request forgery. Same lifetime as the session.
• remember_web_... - set only if you tick "remember me" when logging in, so you stay signed in on that browser until you log out.
• theme - not a cookie but a browser storage value that remembers whether you chose dark or light mode. Stays until you clear browser data.

Cookies from services we use to run the site

• Cloudflare (__cf_bm, and cf_clearance if you are shown a security check) - tells real browsers apart from bots so the site stays up. Up to 30 minutes, or up to a day for a clearance cookie. Cloudflare's page-load analytics on our site do not use cookies.
• Stripe (__stripe_mid, __stripe_sid) - set on checkout pages to detect payment fraud. Up to one year and 30 minutes respectively.

Advertising measurement

We advertise the platform on Google, Meta (Instagram and Facebook) and ChatGPT. To know whether those adverts bring people who actually start or buy a campaign, we load a small measurement script from each of them. These scripts set cookies that let the advertiser match a visit or purchase to an advert you saw. They are loaded only for visitors and artists, never on admin pages.

• Google Ads (_gcl_au, _gcl_aw and related) - conversion measurement for Google adverts. Up to 90 days.
• Meta pixel (_fbp, _fbc) - conversion measurement for Instagram and Facebook adverts, recording page views, checkout starts and purchases. Up to 90 days.
• OpenAI advertising pixel - conversion measurement for adverts shown in ChatGPT, recording page views and purchases with an identifier cookie. Lifetime set by OpenAI.

These scripts are loaded after the page has finished rendering, so they do not slow the page down, and they never receive your account details, campaign content or payment card data. They do see your IP address and the pages you visit.

How to control cookies

• In your browser - every browser lets you block or delete cookies for a site. Blocking the essential ones will stop you logging in.
• Advertising - a browser or extension that blocks trackers stops the advertising scripts entirely. You can also turn off ad personalisation in your Google and Meta settings, and use the industry opt-out page.
• Emails - our email provider, Brevo, may record when an email is delivered or opened; you can block remote images in your mail app to prevent that.

Changes

If we add or remove a cookie we update this list and the date at the top.

Contact

Questions go through the contact page.