Cookie Policy

Last updated: 17 May 2026

1. What Are Cookies?

Cookies are small text files placed on your device when you visit a website. They are widely used to make websites work efficiently and to provide reporting information. We also use similar technologies such as local storage and session storage.

2. How We Use Cookies

Fotool.ai uses cookies for the following purposes:

2.1 Strictly Necessary Cookies

These cookies are essential for the Service to function. They cannot be disabled.

Cookie	Purpose	Duration
__session	Firebase authentication session	Session
fotool_cc	Records your cookie consent choice	6-12 months

2.2 Functional Cookies

These cookies remember your preferences to enhance your experience. They require your consent under GDPR; UK users may opt out at any time (DUAA 2025 exemption).

Cookie / Storage	Purpose	Duration
fotool_language	Language preference	Persistent
app-theme	Theme preference (matrix/gold/ocean)	Persistent
fotool_tutorial_*	Tutorial progress tracking	Persistent
fotool_help_*	Help widget preferences	Persistent
fotool_sidebar_collapsed	Sidebar state	Persistent
fotool_catalog_*	Catalog view settings (page size, expanded nodes)	Persistent

2.3 Analytics Cookies

These cookies help us understand how visitors interact with our website. They measure traffic, identify popular pages, and improve platform performance. All third-party analytics tracking is activated only after you grant explicit consent in the cookie banner.

Cookie	Provider	Purpose	Duration
_ga, _ga_*	Google Analytics 4	Distinguish unique users and persist session state for traffic analysis	Up to 2 years
_gid	Google Analytics 4	Distinguish users for 24-hour metric aggregation	24 hours
_gat_*	Google Analytics 4	Throttle request rate to Google’s servers	1 minute
_clck	Microsoft Clarity	Persists the Clarity user identifier unique to this site	1 year
_clsk	Microsoft Clarity	Links multiple page views into a single Clarity session recording	1 day
Device fingerprint	Fotool (first-party)	Anonymous device identification for security, abuse prevention, and analytics	Session
fotool_feedback_*	Fotool (first-party)	Photo feedback session tracking	Persistent

Cookieless analytics: We also operate Cloudflare Web Analytics, which is a privacy-first beacon that collects aggregate pageview and Core Web Vitals data without setting any cookies or fingerprinting. It runs outside the cookie consent gate and stores no per-user state on your device.

2.4 Marketing Cookies

Marketing cookies measure the effectiveness of our advertising campaigns and help our ad platforms attribute conversions. They are activated only after you grant explicit "Marketing" consent.

Cookie	Provider	Purpose	Duration
_fbp	Meta (Facebook) Pixel	Track visits across websites to deliver and measure targeted advertising	3 months
_fbc	Meta (Facebook) Pixel	Track users who arrive via a Facebook ad click for conversion attribution	2 years
_ttp	TikTok Pixel	Measure and improve the performance of advertising campaigns on TikTok	13 months

3. Local Storage

In addition to cookies, we use browser local storage and session storage to store:

• Firebase authentication tokens (strictly necessary)
• User interface preferences (functional — requires consent)
• Feedback session data (analytics — requires consent)

4. Your Rights

4.1 Global Privacy Control (GPC)

We honour the Global Privacy Control signal. If your browser sends a GPC signal, we automatically treat it as an opt-out of non-essential cookies and data sharing. This satisfies the requirements of the California Consumer Privacy Act (CCPA/CPRA) and similar US state privacy laws.

4.2 California Residents (CCPA/CPRA)

Under the California Consumer Privacy Act, you have the right to:

• Know what personal information we collect and how it is used
• Request deletion of your personal information
• Opt out of the sale or sharing of your personal information
• Non-discrimination for exercising your privacy rights

We do not sell your personal information. To exercise your right to opt out of data sharing for analytics purposes, click the "Do Not Sell or Share" link in the website footer, or use our cookie preferences panel.

4.3 EU/EEA Residents (GDPR)

Non-essential cookies are blocked until you provide explicit consent (opt-in). You may withdraw consent at any time via the cookie preferences panel.

4.4 UK Residents (UK GDPR + PECR + DUAA 2025)

Functional and analytics cookies may operate under the new DUAA 2025 exemptions, provided we offer a clear opt-out mechanism. You can manage your preferences at any time.

5. Managing Cookies

You can control cookies through:

• Cookie Preferences Panel: Click "Cookie Settings" or "Do Not Sell or Share" in the website footer to change your preferences at any time.
• Account Settings: Logged-in users can view and change cookie preferences from the Settings tab in their Account page.
• Browser Settings: Most browsers allow you to block or delete cookies through their settings menu.
• Global Privacy Control: Enable GPC in your browser to automatically opt out of non-essential cookies.

Please note that blocking strictly necessary cookies may prevent the Service from functioning correctly.

5. Third-Party Cookies

Some third-party services integrated into the platform may set their own cookies. We do not control these cookies. Please refer to the respective third-party privacy policies:

• Google (Analytics 4, Tag Manager, Firebase): Google Privacy Policy
• Microsoft (Clarity): Microsoft Privacy Statement
• Meta (Facebook Pixel): Meta Privacy Policy
• TikTok (Pixel): TikTok Privacy Policy
• Stripe (Payments): Stripe Privacy Policy
• Cloudflare (CDN, R2 Storage, Web Analytics): Cloudflare Privacy Policy

6. Updates to This Policy

We may update this Cookie Policy from time to time. Any changes will be posted on this page with an updated "Last updated" date.

7. Contact Us

If you have questions about our use of cookies, contact us at support@fotool.ai.