Cookie & Browser Storage Notice
Last updated October 18, 2026
What this notice covers
Genutext primarily uses first-party browser storage rather than advertising cookies. This storage keeps essential account features working, remembers a selected display currency, and preserves temporary interface state while you use the product. It is not used to store submitted scan text for advertising.
First-party storage used by Genutext
Authentication session
Supabase Auth stores the access and refresh information needed to keep you signed in across page refreshes. It remains in local storage until it is removed through sign-out, browser controls, or session invalidation.
Currency preference
A first-party local-storage value remembers the supported currency you selected for price display, for 90 days. It does not contain payment-card information.
Locked preview report
When an account's free preview report is scanned, the full breakdown is encrypted on our servers with a key only they hold, and the encrypted copy is kept in local storage in the browser that ran the scan, together with the scores and counts shown in the preview. It cannot be read in your browser and is never stored on our servers. It is removed when you unlock or delete the report, and otherwise after 14 days.
Text carried into sign-up or checkout
If you paste text into the free AI check and then choose to create an account or open your dashboard, or you leave the dashboard editor to buy a credit, that text is kept in local storage in your browser so it is waiting in the editor when you come back. It is not sent to us until you press Scan, it is deleted as soon as the editor has picked it up or when you sign out, and otherwise after 30 minutes.
Free image-check token
The AI image detector keeps a random token in local storage (genutext_image_quota_v1) to count your free image checks. Our servers only ever see a keyed hash of it, which is deleted after seven days. Clearing your browser storage removes the token.
Image waiting for the forensic report
If you choose the forensic report and then sign in or pay, the image you chose is kept in your browser’s IndexedDB (genutext-image-draft) so it is still there when you come back. It never leaves your browser until you run the check, and it is deleted once the report is ready, when you choose another image or sign out, and otherwise after 30 minutes.
Internal-traffic flag
Genutext staff can mark their own browser so that their visits are left out of analytics. The flag is only ever set by opening a special link and is not set for visitors.
Temporary scan and interface state
Session storage can preserve scan progress, the active report and interface confirmations within the current browser tab. It can also briefly preserve a validated login/checkout continuation and suppress a duplicate completion event. When you open checkout it notes which credit pack, quantity and currency you chose, and when, for up to 60 minutes, so pressing Back from checkout brings you to the right page; it holds no identifier. This state is temporary and is separate from the submitted source text, which Genutext does not retain.
Acquisition context
Session storage remembers the first landing path and a broad referrer category so Genutext can understand whether an organic visit reaches the scanner. It does not contain submitted text, detector scores or identity.
Cookie-free analytics
Genutext uses two analytics providers, and neither sets cookies on this site: Vercel Web Analytics for aggregate page measurement, and PostHog for product-usage and conversion measurement. PostHog processes this data in the European Union.
PostHog is configured without cookies — its identifier is held in memory only and is discarded when you reload or leave the page — and with automatic click tracking and session replay switched off. Genutext never sends PostHog an account identifier, so analytics events are not linked to your account or joined up across visits.
Genutext’s custom funnel events use the landing path, broad referrer category, tool name and limited login/checkout categories such as method, surface, credit type, currency and quantity. PostHog additionally records standard web context with each event: the page address, referring address, browser, operating system, device type, and an approximate location such as country, region or city derived from your IP address.
Submitted text, scan scores, report contents, email addresses, account IDs and Stripe identifiers are excluded from analytics.
Stripe Checkout
If you choose to buy credits, the checkout page is operated by Stripe. Stripe may use cookies or similar technologies on its own checkout domain under its privacy and cookie notices. Genutext does not store full payment-card details.
Managing browser storage
You can inspect or delete Genutext site data in your browser settings. Removing it can sign you out, reset the selected currency, and clear temporary scan or attribution state. Blocking browser storage may prevent authentication and other essential product features from working correctly.
Related information
The Privacy Policy explains how Genutext handles account, scan, payment and analytics data. The Terms of Service explain the rules that apply when using the product.
Contact
Questions about cookies or privacy can be sent to support@genutext.ai.