Cookie Policy
Last updated: April 11, 2026
Introduction
This Cookie Policy explains how Corebee Chat LTD ("Corebee," "we," "our," or "us") uses cookies and similar technologies when you visit corebee.ai or use our platform. It describes what these technologies are, why we use them, and your rights to control them.
For more information about how we process personal data, see our Privacy Policy.
What Are Cookies
Cookies are small text files stored on your device when you visit a website. They help the site remember your actions and preferences (such as login status and language) over a period of time.
First-party cookies are set by the website you are visiting. Third-party cookies are set by a domain other than the one you are visiting (e.g. an analytics provider). Session cookies are deleted when you close your browser. Persistent cookies remain until they expire or you delete them.
Your Consent Choices
When you first visit corebee.ai, a cookie consent banner asks for your permission to use non-essential cookies. You can:
- Accept All — enable Analytics and Marketing cookies
- Reject All — only Essential cookies are used
- Customize — choose each category independently
No non-essential cookies are placed on your device until you provide consent. The "Accept All" and "Reject All" buttons have equal visual prominence — we do not use dark patterns.
You can change your preferences at any time by clicking the "Cookie Settings" link in the footer of any page.
Essential Cookies
These cookies are strictly necessary for the website to function. They cannot be disabled. Legal basis: GDPR Article 6(1)(b) — necessary for the performance of a contract; ePrivacy Article 5(3) exemption for strictly necessary cookies.
| Cookie | Provider | Purpose | Type | Duration |
|---|---|---|---|---|
sb-*-auth-token | Supabase (corebee.ai) | Maintains your authenticated session | First-party | 7 days |
sb-*-auth-token-code-verifier | Supabase (corebee.ai) | PKCE verification for secure OAuth login | First-party | Session |
cb_consent | corebee.ai | Stores your cookie consent choices | First-party | 6 months |
__stripe_mid | Stripe, Inc. | Fraud prevention during payment processing | First-party | 1 year |
__stripe_sid | Stripe, Inc. | Fraud prevention for active payment session | First-party | 30 minutes |
Analytics Cookies
These cookies help us understand how visitors use our website so we can improve the experience. They are only set after you grant Analytics consent. Legal basis: GDPR Article 6(1)(a) — your consent.
Google Analytics 4
We use Google Analytics 4, provided by Google LLC, to understand how visitors interact with our website. Google Analytics collects information such as pages visited, session duration, and traffic source. IP addresses are anonymized by default for visitors in the EU/EEA. For more information, see Google's Privacy Policy.
| Cookie | Purpose | Type | Duration |
|---|---|---|---|
_ga | Distinguishes unique users with a random Client ID | First-party | 2 years |
_ga_* | Persists session state for GA4 measurement | First-party | 2 years |
_gid | Short-term user identification within 24 hours | First-party | 24 hours |
_gat | Throttles request rate to Google Analytics | First-party | 1 minute |
PostHog
We use PostHog, provided by PostHog Inc., for product analytics, session replay, heatmaps, and user behavior insights. Our PostHog instance runs on EU Cloud (Frankfurt, Germany), meaning all analytics data is stored and processed within the European Union. PostHog includes built-in privacy safeguards including automatic masking of form inputs, passwords, email fields, and bodies of sensitive API requests. For website visitors, analytics and session replay require your consent (Analytics toggle). For signed-up account holders, session replay is enabled by default on authenticated product surfaces under legitimate interest (GDPR Article 6(1)(f)) so our support team can diagnose errors — you can disable it at any time via the cookie preferences modal in the footer. For more information, see the PostHog Privacy Policy.
| Cookie | Purpose | Type | Duration |
|---|---|---|---|
ph_*_posthog | Stores anonymous user ID and session data for product analytics and session replay | First-party | 1 year |
Marketing Cookies
These cookies measure advertising effectiveness and enable conversion tracking. They are only set after you grant Marketing consent. Legal basis: GDPR Article 6(1)(a) — your consent.
Meta Pixel
We use the Meta Pixel, provided by Meta Platforms, Inc., to measure the effectiveness of our advertising on Facebook and Instagram. We also use the Meta Conversions API (server-side) to send hashed event data to Meta for conversion attribution. Hashing is not anonymization — Meta can match hashed data against its user database. For more information, see Meta's Data Policy.
| Cookie | Purpose | Type | Duration |
|---|---|---|---|
_fbp | Tracks visits for remarketing and ad attribution | First-party | 3 months |
_fbc | Stores Facebook Click ID from ad links for conversion attribution | First-party | 2 years |
Google Ads
We use Google Ads conversion tracking, provided by Google LLC, to measure the effectiveness of our advertising campaigns. When you click on a Google ad and subsequently take an action on our website, a conversion is recorded. For more information, see Google's Advertising Privacy Policy.
| Cookie | Purpose | Type | Duration |
|---|---|---|---|
_gcl_au | Stores a unique identifier for conversion linking | First-party | 90 days |
_gcl_aw | Detects Google Ads click ID for conversion attribution | First-party | 90 days |
Google Consent Mode v2
We implement Google Consent Mode v2, which communicates your consent choices to Google services in real time. When you deny consent, Google Analytics and Google Ads operate in a "cookieless" mode that collects no personally identifiable information. Google may use these cookieless signals for modeled (estimated) reporting, but no cookies are set on your device.
Managing Cookies
In addition to using our consent banner, you can control cookies through your browser settings. Most browsers allow you to:
- View and delete existing cookies
- Block all or only third-party cookies
- Set preferences for specific websites
You can also install the Google Analytics Opt-out Browser Add-on to prevent Google Analytics from collecting data across all websites.
If your browser sends a Global Privacy Control (GPC) signal, we honor it as an opt-out of all non-essential cookies, as required by applicable US state privacy laws.
Changes to This Policy
We may update this Cookie Policy from time to time. We will notify you by posting the updated policy on this page and updating the "Last updated" date. If we make material changes to how we use cookies, we will re-request your consent.
Contact Us
If you have questions about this Cookie Policy, please contact us at jonathan@corebee.ai.