Cookie Policy
Last updated: April 11, 2026
1. What Are Cookies?
Cookies are small text files placed on your device when you visit a website. CreatoHub also uses browser localStorage for certain preferences. This policy explains what we store, why, and your choices.
2. Essential Cookies and Storage
Essential cookies and storage items are required for the site to function. They cannot be disabled without breaking core features.
| Name / Key | Purpose | Duration |
|---|---|---|
| firebase:authUser:* | Firebase Auth session — keeps you logged in across page loads (stored in IndexedDB / localStorage) | Session / persistent |
| cookie_consent_v1 | Stores your cookie consent choice (accepted / rejected) so the banner does not reappear on every visit (localStorage) | 12 months |
| __Host-* / __Secure-* | CSRF protection tokens set by Next.js for form submissions | Session |
3. Analytics Cookies (via Google Tag Manager)
Analytics cookies are loaded through Google Tag Manager (container ID: GTM-MDRW62PZ) and are only activated when you accept non-essential cookies via our cookie banner. If you click "Reject non-essential", GTM analytics tags are blocked and no analytics cookies are set.
The following analytics tags may be activated with your consent:
| Service | Purpose | Duration |
|---|---|---|
| Google Analytics 4 (_ga, _ga_*) | Aggregate site usage statistics — pages visited, session duration, traffic sources. No personal identification. | Up to 2 years |
We implement a "consent_update" event on window.dataLayer with default denied state before GTM loads. Analytics tags in GTM are configured to check analytics_consent before firing.
4. Third-Party Cookies
The following third-party services set cookies that are essential for their operation and load regardless of your analytics consent:
| Service | Purpose | Policy |
|---|---|---|
| Dodo Payments | Payment overlay cookies for checkout session management, fraud prevention, and tax compliance. Only loads when you initiate a purchase. | Dodo Privacy |
| Firebase Auth | Authentication tokens for Google Sign-In. Set by Google servers during OAuth flow. | Firebase Privacy |
5. Managing Your Cookie Preferences
You can change your cookie preferences at any time by clicking the "Cookie preferences" button in the footer of any page. Your choice is saved for 12 months and can be updated at any time.
You may also block or delete cookies using your browser settings. Note that disabling essential cookies will break login and other core features. Disabling analytics cookies will not affect the service's functionality.
To opt out of Google Analytics across all sites, you may use the Google Analytics Opt-out Browser Add-on.
6. Changes to This Policy
We may update this Cookie Policy as our use of cookies changes or as regulations evolve. The "Last updated" date at the top indicates when this policy was last revised.
7. Contact
If you have questions about our use of cookies, contact us at support@creatohub.app.