Back to the studio

Legal

Cookies

Atelier uses a session cookie to keep you signed in. Audience analytics run only if the publisher configured them and you accept. There are no advertising cookies.

Effective 3 September 2026.

The English text is the official version. This desk language is for the studio chrome; legal pages remain English unless translated later.

Strictly necessary

Session token (HttpOnly, Secure, SameSite=Lax, host-prefixed): proves you are signed in. Set only after you sign in. Lasts for the session lifetime Better Auth issues.

A short-lived session-data cookie caches that session so the desk does not flicker on every load.

These are required for the account to work. The law does not require a separate opt-in for strictly necessary cookies.

Audience analytics (optional)

If this copy of Atelier is configured, you will be asked before any of these run. Refuse and the desk still works. Withdraw later on the Account page.

Google Analytics 4: a Google analytics cookie after you opt in, plus a page-view beacon. IP is anonymized in our config. Measurement ID is set by the publisher as VITE_GA4_MEASUREMENT_ID.

Plausible: cookieless page views to the publisher’s Plausible site (VITE_PLAUSIBLE_DOMAIN, optional VITE_PLAUSIBLE_SRC for a self-hosted script).

Umami: cookieless page views (VITE_UMAMI_WEBSITE_ID, optional VITE_UMAMI_SRC).

Cloudflare Web Analytics: cookieless beacon (VITE_CLOUDFLARE_BEACON_TOKEN), with single-page-app page views enabled.

None of these tools receive your manuscript, storyboard, or margin keys. If none of the variables above are set, this copy does not load analytics at all.

On this device, not cookies

Manuscripts, boards, pitch packs, your cookie-notice acknowledgement, and analytics choice live in local storage on this browser. That is not a tracking cookie. Clearing site data deletes the desk on this device.

Third parties

Google or X may set their own cookies during sign-in on their sites. Google Fonts is a network request, not a cookie we set. xAI is called only when you use Grok or Imagine. Anthropic, OpenAI, and DeepSeek are called only from the Write margin when you choose them.

Analytics scripts load only after you accept, and only for the providers this copy has configured.