Cookie Policy
Platform: AIQ Agency (aiq.agency)
Last revised: 1/12/2026
1. What are Cookies
1.1 Definition
Cookies are small text files that a website stores in your browser. They help the site "remember" information about your visit.
Simple example: When you choose Ukrainian language - we remember this through a cookie. Next time the site will automatically open in Ukrainian.
1.2 Why are they needed
Cookies help us:
- Recognize you on repeat visits
- Remember your settings (language, theme)
- Protect your account from hacking
- Save your session so you don't have to log in with every click
1.3 Types of Cookies by duration
Session cookies: Temporary files that are automatically deleted when you close the browser. Used for basic site functionality.
Persistent cookies: Stored on your device for a certain period. Help remember your settings between visits.
2. Cookies we use
2.1 Essential Cookies - the site won't work without them
These cookies are mandatory for the platform to work. Without them, you won't be able to log into your account.
2.1.1 Your session (next-auth.session-token)
- What it does: Remembers that you are logged in so you don't have to enter password with every click
- How long it lives: Up to 30 days from the last activity
- Technical details: httpOnly (XSS protection), secure (HTTPS only), sameSite: lax
- Your privacy: Encrypted JWT token - only our server can read it
2.1.2 Hack protection (next-auth.csrf-token)
- What it does: Verifies that requests are actually from you, not a malicious site
- How long it lives: Until browser close (session cookie)
- Technical details: Token for CSRF (cross-site request forgery) attack protection
- Your privacy: Unique technical token, contains no personal information
2.2 Functional Cookies - for convenience
These cookies make using the site more convenient. You can disable them, but you'll lose convenience.
2.2.1 Language choice (locale)
- What it does: Remembers your preferred interface language
- How long it lives: 1 year
- What happens if disabled: Site will constantly open in default language
- Your privacy: Just a language code, no personal data
2.3 Analytics Cookies - statistics for service improvement
We use Google Analytics 4 (GA4) to understand how to improve the platform.
Google Analytics 4 Cookies
- _ga - main cookie for unique visitor identification (duration: 2 years)
- _gid - identifies unique visitors (duration: 24 hours)
- _gat - limits request rate (duration: 1 minute)
What actions we track in GA4
To improve the platform, we collect anonymous statistics about:
Navigation and views:
- Page views (page_view) - which pages you visit
- Prompt views (prompt_view) - which prompts you view
- Workflow views (workflow_view) - which workflows you view
- Blog post views (blog_view) - which articles you read
Content interaction:
- Prompt copying (prompt_copy) - when you copy a prompt
- Workflow step completion (workflow_step_complete) - your progress
- Workflow completion (workflow_complete) - when you finish a course
- Search queries (search) - what you search for on the platform
- Content sharing (share) - when you share a link
Cart and purchase actions:
- Add to cart (add_to_cart)
- Remove from cart (remove_from_cart)
- Begin checkout (begin_checkout)
- Subscription cancellation (subscription_cancel)
Collections:
- Save to collection (save_to_collection)
- Remove from collection (remove_from_collection)
Preferences:
- Language change (language_change)
- Theme change (theme_change)
Technical data:
- Application errors (error) - to improve stability
User properties in GA4
For authenticated users, we also store:
- Subscription tier (subscription_tier) - free, pro, premium
- Subscription status (subscription_status) - active, paused, canceled
- Selected language (language)
Important: We do NOT send your name, email, password, or payment data to Google Analytics.
Your privacy:
- IP addresses are anonymized (anonymize_ip: true)
- We do NOT collect personal data (names, email, passwords)
- Data is used only to improve the platform
- Data retention period in GA4: 26 months
2.4 Marketing and Advertising Cookies
We use marketing cookies to show relevant ads and measure the effectiveness of advertising campaigns.
Meta Pixel (Facebook/Instagram)
- _fbp - user identification for targeted advertising (duration: 90 days)
- _fbc - tracking clicks from Facebook ads (duration: 90 days)
Google Ads
- _gcl_au - Google Ads conversion tracking (duration: 90 days)
- _gac_* - advertising campaign information (duration: 90 days)
LinkedIn Insight Tag
- li_fat_id - tracking for LinkedIn advertising (duration: 30 days)
- UserMatchHistory - ID synchronization for targeting (duration: 30 days)
TikTok Pixel
- _ttp - identification for TikTok advertising (duration: 13 months)
- ttclid - tracking clicks from TikTok Ads (duration: 90 days)
Microsoft Advertising (Bing Ads)
- _uetsid - session identification for Microsoft Ads (duration: 1 day)
- _uetvid - Microsoft conversion tracking (duration: 13 months)
- msclkid - tracking clicks from Bing Ads (duration: 90 days)
X (Twitter) Pixel
- twclid - tracking clicks from Twitter Ads (duration: 90 days)
- personalization_id - Twitter ad personalization (duration: 2 years)
Your privacy:
- These cookies help show you relevant advertising
- You can opt out of personalized advertising through browser settings
- Data is shared with respective advertising platforms
3. Local Storage - your personal notebook
3.1 What is it
Local storage is like a personal notebook in your browser. This data:
- Is stored ONLY on your computer
- Is NEVER automatically sent to the server
- Is accessible only to you
3.2 What we store there
3.2.1 Your preferred language (preferred-language)
- What's stored: Language code
- Why: To remember your language choice between visits
- Duration: Indefinite (until cleared by user)
- Type: localStorage
3.2.2 Theme preference (theme)
- What's stored: Your theme settings ("light", "dark", "system")
- Why: To remember the chosen theme
- Type: localStorage
3.2.3 Form analytics data
To improve service quality, we store anonymous form interaction statistics:
| Key | Purpose | Storage Type |
|---|
| aiq_utm_params | UTM parameters for analytics | sessionStorage |
| aiq_first_visit | First visit time in session | sessionStorage |
| aiq_landing_page | Entry page to the site | sessionStorage |
| aiq_referrer | Referral source | sessionStorage |
| aiq_page_path | Viewed pages history | sessionStorage |
| aiq_visit_count | Number of visits | localStorage |
| aiq_scroll_depth | Scroll depth | sessionStorage |
| aiq_click_count | Click count | sessionStorage |
| aiq_focus_time | Active time on page | sessionStorage |
| aiq_form_start | Form filling start time | sessionStorage |
Important: sessionStorage data is automatically deleted after closing the browser tab.
4. Legal basis - is this legal?
4.1 Essential Cookies - consent not required
Legal basis: Performance of a contract (Art. 6(1)(b) GDPR)
In simple terms: These cookies are necessary for the site to work at all. It's like a key to a door - you can't enter without it. User consent is not required by law.
4.2 Functional Cookies - legitimate interests
Legal basis: Legitimate interests (Art. 6(1)(f) GDPR)
In simple terms: These cookies make the site more convenient (remember language). The benefit to you (convenience) outweighs the privacy intrusion (storing a language code).
4.3 What laws we comply with
Our Cookie Policy is created in accordance with:
- GDPR (General Data Protection Regulation) - EU Regulation 2016/679
- ePrivacy Directive - Directive 2002/58/EC (as amended by 2009/136/EC)
- Ukrainian Law "On Personal Data Protection" - No. 2297-VI
5. How to manage Cookies in your browser
5.1 Instructions for different browsers
You have full control over cookies. Here's how to view and delete them:
Google Chrome
- Click three dots (⋮) in the top right corner
- Settings → Privacy and security → Cookies
- View all site data
- Find aiq.agency and delete
Mozilla Firefox
- Menu (☰) → Settings → Privacy & Security
- Cookies and Site Data → Manage Data
- Find our site and delete
Safari (Mac/iPhone)
On Mac: Safari → Settings → Privacy → Manage Website Data
On iPhone/iPad: Settings → Safari → Clear History and Data
Microsoft Edge
- Settings (⋮) → Privacy, search, and services
- Cookies and site permissions → View all cookies
- Find our site and delete
5.2 What happens if you disable cookies
Disabled ALL cookies
Platform won't work:
- You won't be able to log into your account
- Session not saved - you log out with every click
- Security system disabled
Verdict: Essential cookies must be enabled
Disabled only functional cookies
Loss of convenience, but it works:
- Language resets to default every time
- Theme preference not saved
- Basic functions work normally
Verdict: You can work, but inconveniently
5.3 "Do Not Track" mode
If you have "Do Not Track" enabled in your browser - we respect that:
- Essential cookies still work (otherwise the site breaks)
- Analytics cookies may be limited
6. Security and Privacy
6.1 How we protect your cookies
We take the security of your data seriously:
- HTTPS encryption: All cookies are transmitted over a secure connection
- Secure flag: Browser doesn't send cookies over insecure HTTP
- JWT encryption: Session tokens are encrypted - they cannot be forged
- HttpOnly: Critical cookies are inaccessible via JavaScript - protection against hacking
- SameSite: Protection against CSRF attacks, cookies are not sent with requests from third-party sites
6.2 What we do NOT store in cookies
Cookies do not contain:
- Your password
- Phone numbers
- Email addresses
- Financial information
- Personal data
Why? Because cookies are only a "key" to your session. All real data is stored on a secure server.
7. All Cookies Table
| Cookie Name | Type | Duration | Purpose | HttpOnly | Secure | SameSite |
|---|
| next-auth.session-token | Essential | 30 days | Authentication | Yes | Yes | lax |
| next-auth.csrf-token | Essential | Session | CSRF protection | No | Yes | lax |
| locale | Functional | 1 year | Interface language | No | Yes | lax |
| _ga | Analytics | 2 years | Google Analytics | No | No | - |
| _gid | Analytics | 24 hours | Google Analytics | No | No | - |
| _gat | Analytics | 1 minute | Google Analytics | No | No | - |
| _fbp | Marketing | 90 days | Meta Pixel | No | No | - |
| _fbc | Marketing | 90 days | Meta Pixel | No | No | - |
| _gcl_au | Marketing | 90 days | Google Ads | No | No | - |
| li_fat_id | Marketing | 30 days | LinkedIn Ads | No | No | - |
| _ttp | Marketing | 13 months | TikTok Pixel | No | No | - |
| _uetsid | Marketing | 1 day | Microsoft Ads | No | No | - |
| _uetvid | Marketing | 13 months | Microsoft Ads | No | No | - |
| twclid | Marketing | 90 days | Twitter/X Ads | No | No | - |
8. Third-party Cookies
8.1 What third-party cookies we use
Third-party cookies are cookies from other companies that we have integrated into the platform.
Google Analytics:
- We use it for analytics and platform improvement
- Collects anonymous visit statistics
Google Ads:
- Conversion tracking and advertising effectiveness
- Remarketing for showing relevant ads
Meta (Facebook/Instagram):
- Meta Pixel for conversion tracking
- Targeted advertising on Facebook and Instagram
LinkedIn:
- LinkedIn Insight Tag for B2B advertising
- Conversion tracking for LinkedIn Ads
TikTok:
- TikTok Pixel for conversion tracking
- Targeted advertising on TikTok
Microsoft (Bing Ads):
- UET Tag for conversion tracking
- Advertising in Bing search network
X (Twitter):
- Twitter Pixel for conversion tracking
- Targeted advertising on Twitter/X
Important: For detailed information about cookies used by each advertising platform, please refer to their official privacy policies on their respective websites: Google, Meta, LinkedIn, TikTok, Microsoft, and X (Twitter).
8.2 Links to other sites
Attention: When you follow a link to another site, we do NOT control their cookies.
Recommendation: Check the Cookie Policy of other sites before using them.
9. Your Rights
9.1 Right to know
You have the right to know:
- What cookies we use (section 2)
- Why they are needed (each cookie has an explanation)
- How long they live (see table in section 7)
- Who has access (only our server)
This Cookie Policy gives you all information transparently and honestly.
9.2 Right to refuse
You have the right to:
- Disable functional cookies (you'll lose convenience)
- Delete all cookies at any time
- Configure your browser to block cookies
But: Essential cookies cannot be disabled - without them the site simply doesn't work.
9.3 Right to delete
You can delete cookies like this:
- Manually: Through browser settings (section 5.1)
- On logout: Click "Log out" button - session will close
- Automatically: Configure browser to clear cookies on close
10. Cookie Policy Updates
10.1 When we update the policy
This Cookie Policy may change if:
- We add new features (and new cookies)
- Legislation changes
- We improve security
- We add new platform capabilities
10.2 How we'll notify you
For important changes:
- We'll update the date at the top of this page
- We'll send an email (if you're registered)
11. Frequently Asked Questions (FAQ)
Q1: Can I use the site without cookies?
A: No. Without cookies, you can't log into your account. It's like a lock without a key - the door just won't open.
Q2: Do you sell my cookie data?
A: NO. NEVER. IN NO WAY. Your data stays only with us.
Q3: Do you track me on other sites?
A: No. Our cookies work ONLY on aiq.agency. What you do on other sites doesn't concern us.
Q4: What happens if I delete all cookies?
A: You'll be logged out + all settings will reset (language, theme). Next time you'll have to set everything up again.
Q5: How long are my cookies stored?
A: It depends on the cookie type - see the table in section 7.
Q6: Are cookies on your site safe?
A: Yes! All cookies are transmitted over secure HTTPS, encrypted JWT tokens, HttpOnly, Secure, SameSite protection.
12. Contacts
Something unclear? Write to us:
13. Our other documents
Document version: 1.0
Last update date: 1/12/2026
Platform: AIQ Agency (aiq.agency)
Operator: ФОП Мандрік С.І.
Email: info@aiq.agency
This Cookie Policy complies with GDPR (EU Regulation 2016/679), ePrivacy Directive (2002/58/EC), and Ukrainian Law "On Personal Data Protection" (No. 2297-VI).