Effective Date: March 6, 2026 | Last Updated: March 6, 2026

Cookie Policy

1. Introduction

This Cookie Policy explains how Aively, Inc. (“Aively,” “we,” “us,” or “our”) uses cookies and similar tracking technologies on our website at www.aively.com and our associated platform services (collectively, the “Service”). This policy is part of our commitment to transparency regarding how we collect, use, and protect your personal information.

By continuing to use the Service, you acknowledge this Cookie Policy. Where required by applicable law, we will obtain your consent before placing non-essential cookies on your device.

This Cookie Policy should be read together with our Privacy Policy and Terms of Service, which provide additional details about our data practices and your rights.

2. What Are Cookies?

Cookies are small text files that are placed on your computer, smartphone, or other device when you visit a website. They are widely used to make websites work efficiently, improve user experience, and provide reporting information to site operators.

Cookies may be set by the website you are visiting (“first-party cookies”) or by third-party services that place content or provide functionality on the page (“third-party cookies”). Cookies can remain on your device for different periods of time: “session cookies” exist only while your browser is open and are automatically deleted when you close your browser, while “persistent cookies” survive after your browser is closed and can be used to recognize your device when you reopen your browser.

Similar Technologies

In addition to cookies, we may use similar tracking technologies, including:

  • Pixel tags / web beacons: Tiny graphics embedded in web pages or emails that record whether a page or email has been viewed.
  • Local storage: Browser-based storage (such as HTML5 localStorage) used to persist information across sessions.
  • Device configuration data: Information about your device’s configuration (such as browser type, operating system, and screen resolution) may be used for security and fraud prevention purposes, for example detecting automated abuse or payment fraud. Aively does not use device fingerprinting to track users across unrelated websites.

References to “cookies” in this policy include all of these similar technologies unless otherwise specified. Aively may also use temporary session identifiers to process AI generation requests, manage queued generation jobs, and maintain creator workspace state. These identifiers do not track users across websites and are deleted after the generation process completes. Cookies and local storage may also be used to maintain creator dashboards, remix workflows, royalty attribution tracking, and print-on-demand product configuration within the platform.

3. How We Use Cookies

We use cookies for the following general purposes:

  • To operate and secure the Service: Essential cookies enable core functionality such as user authentication, session management, security protections (including CSRF tokens), and load balancing.
  • To remember your preferences: Preference cookies store your settings and choices (such as language, display preferences, and cookie consent selections) so you do not have to re-enter them each time you visit.
  • To understand how the Service is used: Analytics cookies help us understand visitor behavior, measure traffic patterns, identify popular features, and improve Service performance and reliability.
  • To support commerce and creator features: Functional cookies facilitate our print-on-demand marketplace, creator royalty tracking, Stripe payment processing, and AI generation features.
  • To deliver relevant content: Where you have provided consent (or where applicable law permits), marketing cookies may be used to deliver targeted content and to measure the effectiveness of promotional campaigns.

Aively may also use temporary session identifiers to process AI generation requests, manage queued generation jobs, and maintain creator workspace state. These identifiers do not track users across websites and are deleted after the generation process completes.

Cookies and local storage may also be used to maintain creator dashboards, remix workflows, royalty attribution tracking, and print-on-demand product configuration within the platform.

4. Categories of Cookies We Use

4.1 Strictly Necessary Cookies

These cookies are essential for the Service to function and cannot be disabled in our systems. They are typically set in response to actions you take, such as logging in, setting privacy preferences, or completing transactions. Without these cookies, the Service cannot operate properly.

Cookie Name
Type
Purpose
Duration
session_id
First-party
Maintains your authenticated session across page views
Session
csrf_token
First-party
Protects against cross-site request forgery attacks
Session
cookie_consent
First-party
Stores your cookie consent preferences
1 year
__stripe_mid
Third-party (Stripe)
Facilitates payment processing and fraud prevention
1 year
__stripe_sid
Third-party (Stripe)
Supports payment session integrity
30 min
__cf_bm
Third-party (Cloudflare)
Bot mitigation and security protection
30 min
vercel_session
Third-party (Vercel)
Infrastructure session routing and load balancing
Session

4.2 Performance and Analytics Cookies

These cookies collect aggregated, anonymous information about how visitors interact with the Service. We use analytics tools such as Google Analytics or similar analytics services to understand usage patterns, diagnose technical issues, and improve our platform. No personally identifiable information is collected through these cookies without your consent.

Cookie Name
Type
Purpose
Duration
_ga
First-party
Distinguishes unique users for Google Analytics reporting
2 years
_ga_*
First-party
Maintains session state for Google Analytics 4
2 years
_gid
First-party
Identifies unique users within a 24-hour window
24 hours

4.3 Functional / Preference Cookies

These cookies enable enhanced functionality and personalization. They may be set by us or by third-party providers whose services we have added to our pages. If you disable these cookies, some or all of these features may not function properly.

Cookie Name
Type
Purpose
Duration
user_preferences
First-party
Stores display and interface preferences
1 year
creator_session
First-party
Maintains creator workspace state and active project context
Session
supabase-auth-token
First-party
Manages Supabase authentication state
1 year
5. Third-Party Services and Cookies

Certain features of the Service rely on third-party services that may set their own cookies. These third parties have their own privacy and cookie policies, and we encourage you to review them. Key third-party services include:

  • Stripe (payment processing): Sets cookies to facilitate secure transactions and prevent fraud. See Stripe’s privacy policy at stripe.com/privacy.
  • Google Analytics or similar analytics services (usage analytics): Sets cookies to collect anonymized usage data. If Google Analytics is used, see Google’s privacy policy at policies.google.com/privacy.
  • Supabase (authentication and backend services): Sets cookies to manage user sessions and authentication.
  • RunPod (AI infrastructure): May use session-level identifiers for AI generation requests. No persistent cookies are set on your device by RunPod.
  • Cloudflare (security and CDN): Sets cookies for bot mitigation, DDoS protection, and content delivery optimization. See Cloudflare’s privacy policy at cloudflare.com/privacypolicy.
  • Vercel (hosting infrastructure): May set session cookies for load balancing and request routing. See Vercel’s privacy policy at vercel.com/legal/privacy-policy.

We do not control the cookies set by these third parties. Please refer to their respective privacy policies for information about their cookie practices.

6. Your Choices and How to Manage Cookies

6.1 Cookie Consent Banner

When you first visit the Service, you will be presented with a cookie consent banner that allows you to accept or reject non-essential cookies. You can change your preferences at any time by clicking the “Cookie Preferences” link in the footer of the Service.

6.2 Browser Settings

Most web browsers allow you to manage cookies through their settings. You can typically configure your browser to block or delete cookies, or to alert you when a cookie is being set. Please note that if you block or delete essential cookies, some features of the Service may not function properly. Below are links to cookie management instructions for common browsers:

  • Google Chrome: chrome://settings/cookies
  • Mozilla Firefox: about:preferences#privacy
  • Safari: Preferences > Privacy
  • Microsoft Edge: edge://settings/privacy

6.3 Opt-Out Tools

You may also manage certain third-party cookies using industry opt-out tools:

  • Google Analytics Opt-Out: Install the Google Analytics Opt-Out Browser Add-On at tools.google.com/dlpage/gaoptout.
  • Digital Advertising Alliance: Visit optout.aboutads.info to opt out of interest-based advertising.
  • Network Advertising Initiative: Visit optout.networkadvertising.org to opt out.

6.4 Global Privacy Control (GPC)

We honor Global Privacy Control (GPC) signals sent by your browser. If your browser transmits a GPC signal, we will treat it as a valid opt-out request for the sale or sharing of your personal information, in accordance with the California Consumer Privacy Act, as amended by the California Privacy Rights Act (CCPA/CPRA).

6.5 Do Not Track

Some browsers offer a “Do Not Track” (DNT) feature. While there is currently no universally accepted standard for how to respond to DNT signals, we honor GPC signals as described above.

7. Information for California Residents

If you are a California resident, the CCPA/CPRA provides you with specific rights regarding the personal information collected through cookies and similar technologies. These rights include:

  • Right to Know: You have the right to request that we disclose the categories and specific pieces of personal information we have collected about you, including information collected through cookies.
  • Right to Delete: You have the right to request deletion of personal information we have collected from you, subject to certain exceptions.
  • Right to Opt Out: You have the right to opt out of the “sale” or “sharing” of your personal information, as those terms are defined under the CCPA/CPRA. If we engage in activities that constitute “selling” or “sharing” personal information through cookies, we will provide a “Do Not Sell or Share My Personal Information” link on our website.
  • Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights.

As of the effective date of this policy, Aively does not sell personal information as defined by the CCPA/CPRA. For more information about your California privacy rights, please see our Privacy Policy or contact us at the information provided below.

8. Information for EEA, UK, and International Users

If you are located in the European Economic Area (EEA), the United Kingdom, or another jurisdiction that requires prior consent for non-essential cookies, we will obtain your consent before placing any non-essential cookies on your device.

Under the General Data Protection Regulation (GDPR) and the ePrivacy Directive, you have the right to:

  • Withdraw consent at any time by adjusting your cookie preferences through the “Cookie Preferences” link on our Service.
  • Access, rectify, or erase personal data collected through cookies by contacting us.
  • Lodge a complaint with your local data protection authority if you believe your rights have been violated.

For non-essential cookies, the legal basis for processing is your consent (Article 6(1)(a) GDPR). For essential cookies, the legal basis is our legitimate interest in operating a secure and functional Service (Article 6(1)(f) GDPR).

10. Children’s Privacy

The Service is not directed at children under the age of 13 (or the applicable age of consent in your jurisdiction). We do not knowingly use cookies to collect personal information from children. If we become aware that we have collected personal information from a child through cookies without parental consent, we will take steps to delete that information promptly.

12. Contact Us

If you have questions, concerns, or requests regarding this Cookie Policy or our use of cookies, please contact us:

  • Aively, Inc.
  • Email: privacy@aively.com
  • Website: www.aively.com

For California-specific privacy inquiries, you may also contact us using the mechanisms described in our Privacy Policy.