Cookie Policy

Cookies are small text files that a website stores on your device when you visit it. AdLighter also uses local storage, a similar browser technology that keeps small pieces of data on your device without sending them back to us on every request. This policy explains which cookies and local storage AdLighter uses, why, and how you can control them.

We group them below by purpose: cookies that are strictly necessary for the service to work, functional local storage that is not a cookie but behaves the same way, and cookies used for analytics or marketing. The last two only run with your consent, which we ask for on your first visit.

These cookies are required for AdLighter to work, or record a choice you made yourself, and cannot be switched off. Because they are strictly necessary or set at your own request, the ePrivacy Directive's consent requirement does not apply to them: we do not ask for your consent before setting them, and there is no option to refuse them.

• sb-[project-ref]-auth-token: first party, session and refresh-token lifetime. Keeps you signed in to AdLighter. The [project-ref] part of the name is a fixed identifier of our authentication provider's project, so the cookie you see in your browser carries that identifier in place of it.
• adl_consent: first party, 6 months. Stores the cookie choices you make on this site.
• adl_impersonating: first party, up to 12 hours. Set only in the browser of an authorised staff member during a support session, so the account you are viewing shows an on-screen notice for as long as this is active. It is not set for ordinary use of AdLighter.
• adl_lang: first party, 12 months. Remembers which language you are being served, so you are not sent to the other one on your next visit. On the public site it is set when you use the language switcher or when you open an Italian page directly. Once you are signed in it follows the language set on your account instead, so it is written whenever the two do not already match. It contains nothing but the two letters of that language.
• adl_try: first party, 12 months. A random identifier that lets us apply the daily limit on free tries from the home page and show you the result of your own try. It identifies a browser, not a person.
• adl_try_id: first party, 30 days. Remembers your latest free try so the ads you created are waiting in your account after you sign up.

AdLighter also keeps a few pieces of data in your browser's local storage rather than in a cookie. Local storage is not sent to our servers with every request and never leaves your browser; we only read it when you use the corresponding feature. None of it is used for analytics, profiling or advertising, and you can clear all of it at any time from your browser's settings.

• Sidebar sections: remembers which sections of the app's sidebar you left open and which you collapsed.
• Language of these legal pages: remembers whether you last read them in English or in Italian.
• Selected plan: remembers which subscription plan you chose before signing up, so that checkout starts on the right one. It is cleared once your subscription is active.
• Ad generation preferences: remembers the generation settings you last used, so a new session starts from your own defaults instead of ours.
• Hidden notices: remembers that you asked us not to show a particular notice again, such as the cost warning shown before a vertical image conversion.
• Generation timings: keeps how long your recent generations took, per AI model, so that progress bars can estimate a realistic waiting time. It holds durations only, never the content you generated.
• Actions in progress: keeps track of generations that are still running, so their loading indicators survive a page refresh instead of leaving you with a blank card.

AdLighter uses Google Analytics 4 to understand how the site and the app are used: which pages people visit, which steps of the signup and subscription process they complete, and where they stop. We use it to improve the product and to judge whether our advertising reaches the right people.

• _ga, _ga_<id> (Google Analytics): distinguish visitors and sessions so that repeat visits are not counted as new people. Up to 2 years.
• _gid (Google Analytics): distinguishes visitors over a short window. 24 hours.

Google Analytics runs in what Google calls consent mode. Until you accept analytics cookies, the Google script runs without writing any cookie and without any identifier that would let Google recognise you on a later visit; it sends cookieless pings instead, from which Google estimates overall totals. Those pings are not anonymous in every respect: they still carry your IP address, which is what Google derives an approximate location from. If you accept, the cookies above are written and your visits are measured individually.

AdLighter advertises on Meta (Facebook and Instagram) and on Google Ads, and uses their measurement tools to see which advertisements lead to a subscription. These only run if you accept marketing cookies.

• _fbp (Meta): identifies the browser so that a subscription can be matched to the advertisement that led to it. 3 months.
• _gcl_au, _gcl_aw (Google Ads): record that you arrived from a Google advertisement, so that a later subscription can be attributed to it. 90 days.
• adl_attr (AdLighter, first party): stores the advertisement identifiers above on our own domain, because a subscription is often completed days after the advertisement was clicked and our server has to be able to connect the two. 90 days.

We also send some of this information from our servers, not only from your browser, so that a subscription completed after you have closed the page is still counted. This happens only if you accepted marketing cookies, and it is the same information these tools would receive from your browser. The two recipients do not receive the same thing:

• Meta receives your email address in hashed form (a one-way code, not the address itself), your country, your IP address and your browser identification, together with the amount of the subscription.
• Google receives none of those. It receives the identifier Google Analytics itself placed in your browser (the value of the _ga cookie, which Google calls the client id), the internal identifier of your AdLighter account in our database, and the amount and currency of the subscription.

To be able to send any of this, we keep a copy on your own account record: the advertisement identifiers, your IP address and your browser identification. That copy is kept for as long as your account exists and is deleted with it, which is not the same as the cookie lifetimes listed above: those describe how long each cookie stays in your browser. See the retention section of our Privacy Policy.

Withdrawing your consent stops anything further from being sent. It cannot withdraw what was already sent before you changed your mind.

Some pages on the site (our examples) embed video hosted by Vimeo, a sub-processor listed in our Privacy Policy. The video is click-to-load: nothing is requested from Vimeo, and no cookie is set, until you press play yourself.

The player is configured with Vimeo's own dnt=1 (do-not-track) setting, which asks Vimeo not to use the view for tracking, and this stays on regardless of your cookie choices below. If you do click to play a video, the request goes to Vimeo directly and Vimeo may set its own cookies in your browser on its own domain; we do not control what those are, since the player runs on Vimeo's site, not ours.

You can change or withdraw your cookie consent at any time from the Cookie preferences link. It sits in the footer of the public site, at the bottom of the sidebar once you are signed in, and at the foot of this page. It opens the same preference panel you were shown on your first visit, pre-filled with the choices you made, and saving a new choice takes a single click. Withdrawing consent does not affect the strictly necessary cookies described above, which stay active regardless, and it does not affect the Vimeo player described above, which never depends on these preferences.

Refusing or withdrawing analytics and marketing consent stops the corresponding cookies from being written and the corresponding scripts from running as described in each section above.

While this notice says so, scrolling the page after the banner appears counts as accepting analytics and marketing cookies. You can withdraw that consent at any time from Cookie preferences, and you can refuse before scrolling with the Reject button.

For questions about this cookie policy, contact us:

• Sefirot Srl, Via Vittorio Amedeo Cignaroli 8, 10152 Torino, Italy
• VAT IT11963260010
• REA TO-1254392
• PEC sefirotsrl@pec.it
• Email info@sefirot.it