1. What we store on your device
Full list of the storage used by save-me.ai:
- •token — authentication cookie (signed JWT). Technical, HttpOnly and Secure: the browser sends it only to our server and it cannot be read by scripts. Duration: browsing session, or 14 days of inactivity if you choose "stay signed in" (the window renews on each use).
- •refresh_token — technical cookie to renew the session without logging in again. HttpOnly and Secure. Duration: session, or 45 days if you choose "stay signed in".
- •NEXT_LOCALE — stores your chosen language (it/en/de/fr). Technical. Duration: browsing session (it is set again on each visit; if you have an account, the stable preference is saved in your profile).
- •savemeai-theme — stores your chosen visual theme (light/dark). It is not a cookie but an entry in the browser's localStorage: it is never transmitted to the server. Duration: until you clear the site's browsing data.
- •Browser service storage (service worker and installable app cache): used for the PWA's offline operation and kept on your device. Duration: until the cache is updated or the app or site data is removed.
- •selected-ai-model — stores the AI model chosen for the conversation. Not a cookie but a sessionStorage entry: it stays on your device only, is never sent to the server and is cleared when the tab is closed.
- •smai-return-flow — coordinates the return to the right page after a payment on the gateway. sessionStorage: cleared when the tab is closed.
- •sm_adv — stores the labels of the promotional campaign through which you reached the site (source, channel, campaign, content, market), exactly as present in the link, plus two technical indicators: the traffic class (person or automated system) and which steps of the path have already been counted, so that each step is counted only once. No personal data, no individual identifier. First-party measurement cookie, HttpOnly and Secure, used only for aggregate statistics on the effectiveness of our campaigns; it is not accessible to third parties nor shared with advertising platforms. Duration: 7 days; it is removed upon registration.