Cookie Policy
Last updated: July 13, 2026
This Cookie Policy explains how Jacard AI, Inc. ("Jacard", "we", "us") uses cookies and similar technologies on jacard.ai, shopping.jacard.ai, and related Jacard services. It should be read together with our Privacy Policy. We operate from the United States and serve users globally, so this policy is written with the EU/UK GDPR and US state privacy laws (including the CCPA/CPRA) in mind.
What cookies are
Cookies are small text files that a website stores on your device. They let a site remember things between page loads, for example, that you are signed in, or which choices you made on a consent banner. Related technologies (localStorage, sessionStorage, and pixels) work similarly, and we use the word "cookies" in this policy to cover all of them.
Cookies set by us are "first-party" cookies. Cookies set by other companies whose tools we embed are "third-party" cookies.
How we use cookies
We keep our cookie footprint deliberately small. We use cookies for three things:
- Keeping you signed in. Our authentication provider, Supabase, sets session cookies and tokens so that your account stays logged in as you move around the product. Without these, signed-in features simply do not work.
- Remembering your consent choices. When you accept or decline analytics on our consent banner, we store that preference on your device so we do not ask you on every visit.
- Understanding how the product is used. With your consent where the law requires it, we use analytics tools to see which features are used, how pages perform, and where people run into problems. This is how a small team decides what to fix and build next.
We do not use cookies for advertising, ad retargeting, or selling data to data brokers. We do not build cross-site advertising profiles.
Categories of cookies we use
| Category | Purpose | Tools | Consent required? |
|---|---|---|---|
| Essential | Sign-in sessions and authentication tokens; security features such as rate limiting; storing your consent-banner preference | Supabase Auth (session/auth cookies and tokens); first-party consent preference storage | No. These are strictly necessary for the service to function and are exempt from consent under the GDPR and recognized as necessary under US state privacy laws |
| Analytics | Aggregate usage measurement, page performance, and product improvement | Vercel Analytics (largely cookieless, aggregated measurement); Google Analytics 4 (cookies measuring visits and feature usage); Microsoft Clarity (cookies supporting session replays and heatmaps of anonymized interactions) | Yes, where required: Google Analytics 4 and Microsoft Clarity are only loaded after you consent in regions where consent is required (such as the EU/UK). Vercel Analytics does not rely on cross-site cookies or persistent identifiers |
A few notes on the analytics row:
- Vercel Analytics is designed to work without tracking individual users across sites; it gives us aggregate page-view and performance data.
- Google Analytics 4 and Microsoft Clarity are optional on our side as well as yours: they are not enabled on every Jacard surface, and where they are, they load only after consent where consent is required.
- Analytics data reaches us as usage patterns, not as a way to read your prompts or files.
The consent banner
When you first visit from a region where consent is required, you will see a consent banner before any analytics cookies are set.
- Accept enables the analytics tools described above.
- Decline (or ignoring the banner) means only essential cookies are used. The product works exactly the same either way; we do not gate features behind analytics consent.
Your choice is stored on your device. You can change your mind at any time:
- Use the cookie preferences link in the site footer to reopen the banner and update your choice.
- Or clear this site's data in your browser settings, which removes the stored preference (and your session), so the banner appears again on your next visit.
Withdrawing consent stops future analytics collection from your device. It does not retroactively delete data already collected; for deletion requests, see the contact section below and our Privacy Policy.
Third-party cookies
- Google OAuth. If you choose "Sign in with Google", Google sets its own cookies as part of the sign-in flow. Those cookies are governed by Google's privacy policy, not this one. If you sign in with email and password instead, no Google sign-in cookies are involved.
- Analytics providers. As described above, Google Analytics 4 and Microsoft Clarity set third-party cookies when enabled and consented to. Their handling of data is described in Google's privacy policy and Microsoft's privacy statement.
We do not embed social media widgets, ad network tags, or other third-party trackers on our pages.
Managing cookies in your browser
All major browsers let you view, block, and delete cookies:
Be aware that blocking essential cookies will sign you out and may prevent sign-in from working at all. Blocking analytics cookies has no effect on functionality.
Do Not Track and Global Privacy Control
There is no settled industry standard for responding to "Do Not Track" browser signals, and our services do not currently respond to DNT or Global Privacy Control signals automatically. The consent banner remains the reliable way to control analytics on our sites: if you decline, analytics cookies are not set, regardless of browser signals.
Changes to this policy
We may update this Cookie Policy as our tooling or the law changes, for example, if we add or remove an analytics provider. We will update the "Last updated" date at the top of this page, and for material changes we will resurface the consent banner or otherwise give you notice before new non-essential cookies are set.
Contact
Questions about cookies or this policy:
- Email: privacy@jacard.ai
- Post: Jacard AI, Inc., 360 S Baywood Ave, San Jose, CA 95128
If you are in the EU/UK, you also have the right to lodge a complaint with your local data protection authority. If you are a California resident, you may exercise your CCPA/CPRA rights as described in our Privacy Policy; we do not sell personal information collected through cookies.