Cookie Policy
Effective date: September 27, 2026
Magif.ai uses cookies and similar technologies to run the platform, understand how it is used, and measure our advertising. This page explains exactly which cookies we use, what they do, and how long they last.
For visitors in the European Union and the United Kingdom, we show a banner on your first visit. Analytics and advertising cookies load when you arrive; if you continue without accepting, we immediately disable those trackers, delete the cookies they set, and keep them off on every future visit. You can change your choice at any time using "Manage your choice" below. Strictly necessary cookies (for sign-in and security) are always active — the platform cannot work without them.
Strictly necessary
Always activeRequired for the platform to function: signing in, keeping your session secure, and protecting forms. These are always on and are not covered by the consent choice.
| Cookie | Purpose | Duration |
|---|---|---|
| next-auth.session-token / __Secure-next-auth.session-token | Keeps you signed in to your account. | Session / up to 30 days |
| next-auth.csrf-token | Protects sign-in and forms against cross-site request forgery. | Session |
| next-auth.callback-url | Returns you to the right page after signing in. | Session |
| ft | Internal routing/feature flag used by the application middleware. | Session |
| magif_consent | Remembers your cookie choice (accepted or declined). | 6 months |
Our own attribution
First-party cookies we set to understand which campaign or referral brought you to Magif, so we can credit the right source when you sign up.
| Cookie | Purpose | Duration |
|---|---|---|
| magify_meta_attr | Stores Meta ad click id (fbclid) and UTM parameters from your landing URL. | 90 days |
| magify_ref | Stores a referral / affiliate code from a ?ref= or ?via= link. | 60 days |
Meta (Facebook) Pixel
Provider: Meta Platforms Ireland Ltd.
Measures the effectiveness of our advertising on Facebook and Instagram and helps attribute sign-ups to ads.
| Cookie | Purpose | Duration |
|---|---|---|
| _fbp | Identifies browsers for Meta ad measurement and delivery. | 90 days |
| _fbc | Stores the Meta ad click id (fbclid) for conversion attribution. | 90 days |
TikTok Pixel
Provider: TikTok Information Technologies UK Ltd.
Measures the effectiveness of our advertising on TikTok and helps attribute sign-ups to ads.
| Cookie | Purpose | Duration |
|---|---|---|
| _ttp / tt_* | Identifies browsers for TikTok ad measurement and delivery. | Up to 13 months |
Google Analytics 4
Provider: Google Ireland Ltd.
Aggregate website analytics: pages viewed, sessions, and traffic sources, to understand how the site is used.
| Cookie | Purpose | Duration |
|---|---|---|
| _ga | Distinguishes unique visitors. | 2 years |
| _ga_<container-id> | Persists session state for Google Analytics 4. | 2 years |
| _gid | Distinguishes unique visitors (short-term). | 24 hours |
Microsoft Clarity
Provider: Microsoft Ireland Operations Ltd.
Session replay and heatmaps that show how visitors interact with pages, so we can improve usability. Clarity is fully disabled on end-user chat pages, so private conversations with an AI agent are never recorded.
| Cookie | Purpose | Duration |
|---|---|---|
| _clck | Persists a Clarity user id and preferences across visits. | 1 year |
| _clsk | Links page views within a single Clarity session. | 1 day |
PostHog (EU Cloud)
Provider: PostHog, Inc. (EU Cloud)
Product analytics and session recording, hosted in the EU and served through a first-party proxy on the magif.ai domain. When you decline, PostHog runs in memory-only mode with capturing switched off and sets no cookie. PostHog is fully disabled on end-user chat pages, so private conversations with an AI agent are never captured or recorded.
| Cookie | Purpose | Duration |
|---|---|---|
| ph_<project-key>_posthog | Stores an anonymous device id and feature-flag state for product analytics. | 1 year |
Vercel Analytics & Speed Insights
Provider: Vercel Inc.
Privacy-friendly, aggregate performance and traffic metrics. These are cookieless — they set no cookies on your device.
| Cookie | Purpose | Duration |
|---|---|---|
| — (no cookies) | Aggregate, cookieless performance and audience metrics. | None |
For more on how we handle personal data, see our Privacy Policy and Subprocessor Register.