Cookie Policy
Last updated: 2026-09-29
1. What cookies we set, and why
This policy covers the IaC Genius V2 application. Cookies support sign-in, sign-in security and interface preferences. Browser storage also remembers interface choices. The separate marketing website has its own privacy notice and may use analytics or support chat that this application does not include.
2. Strictly necessary
| Cookie | Purpose | Lifetime |
|---|---|---|
| better-auth.session_token* | Keeps you signed in. Set by Better Auth when you sign in; without it the Service cannot tell who you are. | 7 days, refreshed on use |
*Secure deployments can prefix cookie names with __Secure-. Social sign-in and optional two-factor authentication can use additional security cookies. Their names and lifetimes depend on the sign-in flow. A complete hosted inventory of these flows remains part of this draft's review.
3. Preference
These remember choices you make in the interface. Cookies are sent back to the application on matching requests; they are not an advertising feature.
| Cookie | Purpose | Lifetime |
|---|---|---|
| active_theme | Remembers the interface theme you selected. | 1 year |
| sidebar_state | Remembers whether the dashboard sidebar is open or collapsed. | 7 days |
Open item. These two preference cookies are set by our own theme and sidebar components and are not currently gated behind a consent choice. Their classification and whether a choice is needed for the intended audience remain part of this draft's review.
4. Security and diagnostics
Vercel Bot ID protects sign-up and sign-in requests against automated abuse. Sentry provides error and performance monitoring when configured and can receive request metadata. A service can process data without setting cookies; these activities are also described in the Privacy Policy. This application does not include the marketing website's Vercel Web Analytics or Crisp chat components.
5. Browser local storage
Browser local storage remembers the preferences below. Unlike cookies, local storage is not automatically attached to HTTP requests:
| Key | Purpose | Lifetime |
|---|---|---|
| theme | Light or dark mode preference for the interface. | Until you clear it |
| iacg_cookie_notice_dismissed | Remembers that you dismissed the cookie notice, so it is not shown again. | Until you clear it |
6. The cookie notice
The application's notice provides information and remembers its dismissal in local storage. Dismissing it does not grant consent to marketing analytics or support chat on another site, and it does not turn diagnostics on or off.
7. Managing cookies
You can delete or block cookies in your browser settings. Blocking the session cookie will sign you out and stop you using the Service; clearing the preference cookies only resets your theme and sidebar state.
8. Contact
Questions about cookies: write to privacy@iacgenius.com. See also the Privacy Policy and Terms of Service.