A few cookies.

SiteBrain sets a few cookies of its own and keeps some settings in your browser's local storage. Essential items are always on. Analytics and marketing items appear only after you accept that group in our cookie banner (CookieBrain), and you can change your choice at any time through "Cookie preferences". The groups below match the banner.

• auth_token (cookie) — a signed session token that keeps you logged into the dashboard. Expires after 7 days and is cleared when you log out.
• sb_locale (cookie) — your language preference (EN/PL). 30-day expiry, or 1 year if you change the language in the dashboard.
• sb_last_login (cookie) — remembers which sign-in method and email you used last on this device. 90-day expiry.
• sb_oauth (cookie) — 10 minutes, only during Google sign-in.
• sb_pv (cookie) — only if you build a free preview on /try. It proves the preview is yours and is sent only to that preview's address. It is also set when you open the link from the preview email. 7-day expiry.
• cookie_brain_consent (local storage) — your answer in the cookie banner. Kept until you change it or clear your browser data.
• sb_sidebar_collapsed, sb_pending_site and sb_tested_… (local storage, dashboard only) — whether the sidebar is collapsed, the website address you typed before checkout, and whether you have tried your bot yet.

These can't be switched off, because the service can't work without them.

If you accept analytics cookies, we load Google Tag Manager, which runs Google Analytics. Google Analytics sets the _ga and _ga_… cookies to tell visits apart; Google sets how long they last. Without that consent neither script loads.

Separately, we count visits to our marketing pages with our own counter that sets no cookies, stores nothing on your device and does not keep your IP address.

If you accept marketing cookies, we load the Meta Pixel on our marketing pages and on the sign-in and sign-up pages. In the dashboard it loads only once, right after a sign-up with Google, to send the account-created event.

• _fbp and _fbc (Meta's cookies) — Meta sets them to link a visit to an ad; _fbc appears only when you arrive from a Meta ad. Meta sets how long they last.
• sb_lead (our cookie) — only when you create an account with Google after accepting marketing cookies. It holds a random event id so Meta counts the sign-up once. It lasts 10 minutes and is deleted as soon as the next page reads it.

What these events send to Meta is set out in our privacy policy.

The SiteBrain widget embedded on your site sets no cookies. In the visitor's browser storage for your site it keeps:

• sb_visitor (local storage) — a random visitor id, so we can stitch their messages into one conversation,
• sb_history_… (local storage) — a copy of the open conversation, so it survives moving to another page. The widget removes a copy older than 24 hours the next time it loads,
• sb_visited_…, sb_sound, sb_theme, sb_teaser_snooze_… (local storage) — whether the widget has been opened before, the sound setting, light or dark theme, and a snooze on the invitation bubble,
• sb_teaser_dismissed_…, sb_scrollend_…, sb_trigger_fired_… (session storage, cleared when the tab closes) — which invitations have already been shown.

No profiling, no cross-site tracking, no resale.

You can change your analytics and marketing choice in "Cookie preferences". Most browsers also let you block or delete cookies and site data; check your browser's help pages for instructions. If you block SiteBrain's essential items, some features may stop working.