Cookie Policy
Last updated: 18 October 2026
This Cookie Policy explains how Smasher Studio uses cookies and similar technologies when you visit our platform. It describes what cookies are, the types we use, and how you can manage your cookie preferences.
1. What Are Cookies
Cookies are small text files that are stored on your device (computer, tablet, or mobile phone) when you visit a website. They are widely used to make websites work more efficiently, provide a better user experience, and give website operators useful information about how their site is being used.
We also use localStorage, a similar browser storage mechanism, to persist certain preferences and session data locally on your device.
2. Essential Cookies
These cookies are strictly necessary for the platform to function. They cannot be disabled without breaking core functionality.
| Cookie | Purpose | Duration |
|---|---|---|
| auth-token | Stores your JWT session token to keep you signed in. This is an httpOnly cookie set by the server and is not accessible to JavaScript. | 7 days |
| tempUserId | Assigns a temporary identifier to guest users who have not created an account. This enables guest access to limited features like the Creative Studio demo. Also used, when an account is created (or, if that check could not finish, once at its first sign-in), to check that no more than one free account is created per device. | 30 days |
| cookie-consent | Records your cookie consent preferences so we do not ask you repeatedly. | 1 year |
| __smasher_utm | Stores the campaign parameters (utm_source, medium, campaign, term, content) from the link you arrived on, so we can attribute signups to marketing campaigns. This is an httpOnly, first-party cookie and is never shared with third parties. | 30 days |
3. Functional Cookies
These cookies and localStorage entries enhance your experience by remembering your preferences. The platform will still work without them, but some features may not behave as expected.
| Storage Key | Purpose | Type |
|---|---|---|
| theme | Stores your theme preference (light, dark, or system) to maintain visual consistency across sessions. | localStorage |
| locale | Stores your preferred language (English, French, or Spanish) for the interface. | localStorage |
| creative-studio-* | Stores chat sessions, generated assets, and collections locally for guest users who are not signed in. Authenticated users have this data stored server-side instead. | localStorage |
4. Analytics Cookies (only with your consent)
With your consent to analytics cookies, we measure how the platform is used to find what to improve. Nothing in this category is set before you accept it.
| Cookie / Storage | Purpose | Provider |
|---|---|---|
| ph_* (PostHog) | Product analytics: which pages and features are used, and where a visit stops. Stored in a cookie and localStorage. Hosted in the EU (Frankfurt). | PostHog (EU) |
| Internal analytics | Basic server-side usage tracking including feature usage counts, generation success rates, and session durations. This data is stored in our database and is not shared with third parties. | Smasher Studio |
5. Advertising Cookies: the Meta Pixel and the TikTok Pixel (only with your consent)
Only if you accept marketing cookies, we load the Meta Pixel and the TikTok Pixel. They let Meta and TikTok know that a browser visited Smasher Studio, so we can show our ads on their platforms to people who already know us, and measure whether those ads work. Before you accept, nothing is loaded from Meta or TikTok: no script, no image, no request.
They receive five events and nothing else: a page viewed, a tool page viewed (with the tool's name), a sign-up, a payment started and a payment completed (with the plan and the amount). They also receive what any request carries: the address of the page, your IP address and your browser's details, and they read their own cookie below. They never receive the content of your conversations, your prompts, your images, your name or your email address.
| Cookie | Purpose | Provider and duration |
|---|---|---|
| _fbp, _fbc | Meta Pixel: recognises the browser across visits so that Meta can show our ads to people who visited and measure them. | Meta Platforms Ireland Ltd. _fbp up to 90 days. |
| _ttp, ttcsid, _tt_enable_cookie | TikTok Pixel: recognises the browser across visits so that TikTok can show our ads to people who visited and measure them. | TikTok Technology Limited (Ireland). _ttp up to 13 months. |
For this collection and transmission, Meta and TikTok act as joint controllers with us (CJEU, Fashion ID, C-40/17); what they do with the events afterwards is governed by their own policies: Meta Privacy Policy and TikTok Privacy Policy. They may transfer data outside the European Economic Area. Your choice is kept for 12 months, then you are asked again; you can withdraw it at any time, see section 7.
6. Third-Party Cookies
Some third-party services integrated into our platform may set their own cookies:
- Stripe: May set cookies for payment fraud prevention and session management during the checkout process.
- Google OAuth: If you sign in with Google, Google may set cookies related to the authentication flow.
- GitHub OAuth: If you sign in with GitHub, GitHub may set cookies related to the authentication flow.
We do not control the cookies set by these third parties. Please refer to their respective privacy and cookie policies for more information.
7. How to Manage Cookies
You can control and manage cookies in several ways:
Browser Settings
Most browsers allow you to view, manage, and delete cookies through their settings. You can configure your browser to block all cookies, accept only first-party cookies, or be notified before a cookie is set. Here are links to cookie management guides for popular browsers:
Cookie Consent
When you first visit Smasher Studio, a banner asks for your choice. Refusing is one tap, like accepting, and no analytics or advertising cookie is set until you accept. You can change your choice at any time, as easily as you gave it: with "Cookie settings" at the bottom of every page, in your account settings, or here: . Withdrawing your consent to marketing cookies stops the Meta and TikTok pixels at once and deletes their cookies from this site.
Impact of Disabling Cookies
Please note that disabling essential cookies will prevent you from using key features of the platform, including signing in to your account. Disabling functional cookies may result in a degraded experience (for example, your theme and language preferences will not persist).
8. Updates to This Policy
We may update this Cookie Policy from time to time to reflect changes in technology, regulation, or our business practices. Any changes will be posted on this page with an updated "Last updated" date.
9. Contact
If you have any questions about our use of cookies or this Cookie Policy, please contact us at privacy@smasher.studio.