This Cookie Notice explains the cookies and similar technologies used on promptic.eu and in the Promptic application.
1. Summary
Promptic currently uses required cookies and similar technologies for authentication, security, session continuity, organization/AI Application state, and user interface preferences. We also use Vercel Analytics, which Vercel describes as privacy-focused web analytics that does not use third-party cookies.
We do not currently use advertising cookies, cross-context behavioral advertising cookies, marketing pixels, or third-party session replay on promptic.eu. The absence of advertising cookies does not itself exempt other technologies from consent requirements. Consent is required before non-essential storage of, or access to, information on your device, whether or not personal data or cookies are involved.
Session or configured authentication lifetime; short-lived cache entries are used for session performance.
CSRF, verification, one-time password, device-code, and invite tokens
Protect sign-in, sign-up, email verification, device authorization, and invitation flows.
Strictly necessary
Short-lived, until expiry, completion, replacement, or revocation.
Organization and AI application state
Remember the active organization and route users to the correct AI application context.
Strictly necessary or functional
For the session or until replaced by a newer organization/AI Application state.
sidebar_state
Remember whether the dashboard sidebar is open or collapsed.
Functional preference
Seven days.
Local interface preferences and pending authorization state
Remember requested panel widths, dismissed announcements and admin tabs, or continue a user-initiated MCP authorization flow.
Requested functionality; not advertising
Local preferences remain until replaced or browser storage is cleared. Pending authorization state is removed when consumed; incomplete flows may remain until cleared.
Vercel Analytics
Understand aggregate website traffic and page performance without advertising profiling or third-party cookies.
Privacy-preserving analytics
Vercel states that visitor session state is automatically discarded after 24 hours; aggregate analytics remain available in Vercel reports.
3. Consent and necessary technologies
Under Section 25 TDDDG, device storage and access do not require consent only where needed solely to transmit a communication or strictly necessary to provide a service you expressly request. This includes necessary sign-in and security state. A preference is not exempt merely because it is useful: it must be necessary for the requested function.
We do not currently display a consent banner. Vercel describes its analytics as using a hash of incoming request information rather than third-party cookies. That description is not a blanket consent exemption for analytics. Any non-essential device storage or access must remain disabled until valid consent is obtained, with an equally accessible way to withdraw it. Processing personal data also requires a separate GDPR legal basis, as described in our Privacy Policy.
4. Your choices
You can block or delete cookies in your browser settings, but required cookies are necessary for login and core application functionality.
You can use browser privacy controls or content blockers to limit analytics requests, though this may affect site telemetry.
