1. What Are Cookies?
Cookies are small text files stored on your device when you visit a website. "Local storage" is a similar browser-native feature that lets us remember small amounts of data between visits. We use these technologies together to deliver the Service.
2. What We Use
Character App, operated by charactr, inc. ("charactr"), uses cookies and local storage for the Service and first-party product analytics. Specifically:
- Auth session — set by Supabase to keep you signed in between visits. Required for the Service to work.
- CSRF token — protects form submissions from cross-site request forgery. Required for security.
- UI preferences — we store your V5 theme choice, recent characters, and scroll position in local storage so the app feels continuous. No personal data here.
- Age-gate acknowledgment — remembers that you confirmed your age on first launch. No DOB is stored client-side; only a yes/no flag.
- Product analytics identifiers — first-party anonymous, session, and signed-in user identifiers that help us measure pages viewed, features used, checkout outcomes, generation blockers, generation success rates, errors, and app lifecycle events. We do not store prompts, emails, auth tokens, payment secrets, or advertising identifiers in this analytics storage.
3. Third-Party Cookies
A few third-party services we use may set cookies when you interact with their flows. They are governed by their own cookie and privacy policies:
- Stripe sets session and fraud-prevention cookies on web checkout pages. Required to process payments securely. See stripe.com/cookies-policy.
- RevenueCat (iOS) uses native on-device storage, not browser cookies. Billing flow handled by Apple StoreKit.
- Sentry uses first-party storage for error-grouping and session IDs — no personal data and no cross-site tracking. See sentry.io/legal/cookie-policy.
- Google Analytics receives page-view and navigation events so we can measure which public pages are useful and whether visitors reach the product. It is configured for our own site analytics, not advertising or cross-site audience building.
- PostHog receives first-party product analytics events when analytics is enabled. Events are used to understand product usage and reliability, not for advertising or cross-site tracking.
4. What We Don’t Do
We do not set any of these categories of cookies:
- advertising cookies;
- cross-site tracking pixels;
- social-media plug-in cookies (Facebook Pixel, Twitter, etc.);
- marketing-automation cookies;
- analytics cookies that identify individuals across sites.
We do not sell or share cookie data. We do not allow third parties to drop advertising cookies through our site.
5. How to Disable Cookies
You can block or clear cookies in your browser's settings:
Blocking strictly-necessary cookies means sign-in won't persist, CSRF protection won't work, and the Service won't function correctly. Blocking local storage may also prevent analytics identifiers, saved preferences, and draft state from persisting.
6. GDPR and ePrivacy Consent
Under the GDPR and the ePrivacy Directive (and the UK's PECR), websites may need consent for cookies or local storage that are not strictly necessary to deliver a service the user requested.
Character App does not use advertising or cross-site tracking cookies. Where a consent control is required for optional analytics storage, we will honor that requirement.
7. Changes and Contact
We may update this Cookie Policy from time to time. The "Last updated" date at the top of this page will always reflect the current version. Material changes will also be announced in-app.
See also our Privacy Policy for how we handle personal data more broadly.
Questions? Email support@character.app.