Cookie Policy
This policy explains what CreArt stores on your device and why. The first part covers the website at creartai.com; the last section covers the mobile app, which does not use cookies but does use device identifiers.
Cookies and similar technologies
Cookies are small text files a website stores on your device. Browsers offer other storage of the same kind — localStorage and IndexedDB — and this policy covers those too, because from your point of view there is no difference: it is data kept on your device between visits.
What the website stores
Strictly necessary
Required for the site to work; they cannot be switched off from within it.
Firebase Authentication keeps your sign-in session in your browser (IndexedDB, "firebaseLocalStorageDb") so you are not signed out between pages. It appears only once you sign in.
Google reCAPTCHA Enterprise sets its own cookies through Firebase App Check. It is what stops the generators being driven by scripts, and it runs on every page that can reach them. These cookies are set by Google and governed by Google's privacy policy.
If you are an operator of the site, signing in to the admin area sets "creart_admin_session": a signed, HTTP-only cookie that expires after 12 hours. Ordinary visitors never receive it.
Functional
These remember choices you make. The site works without them; it simply forgets your preferences.
"lang-pref" stores the language you chose, so the home page opens in it next time. "sidebar-expanded" remembers whether you collapsed the sidebar. "community-saves" keeps the community images you saved, in your browser only.
Analytics
We use Vercel Analytics and Vercel Speed Insights to count page views and measure loading performance. Neither sets cookies, and neither builds a profile of you or follows you to other sites.
The website runs no Google Analytics, no Google Tag Manager, and no advertising or cross-site tracking of any kind. If that ever changes, a consent banner will be in place first, this page will be updated, and nothing of the sort will load until you agree to it.
Third parties your browser contacts
Loading a page requests fonts from Google Fonts (fonts.googleapis.com and fonts.gstatic.com). No cookies are set, but the request discloses your IP address to Google, as it does on any site that loads fonts this way.
If you buy a subscription on the website, the payment is handled by Paddle under their own policies. Generated images are stored on Cloudflare R2 and delivered through links that expire.
The mobile app
The app does not use cookies, but it does use your device's advertising identifier — IDFA on iOS, Advertising ID on Android — for advertising and to measure which campaigns bring people to CreArt. This involves Google AdMob, AppsFlyer and Meta.
On iOS, personalised advertising requires your permission through Apple's App Tracking Transparency prompt, and you can change your answer under Settings › Privacy & Security › Tracking. On Android you can reset or delete your Advertising ID under Settings › Google › Ads. Buying a paid plan removes the ads.
The app also stores your sign-in session, your preferences, and a push notification token if you allow notifications.
Controlling what is stored
Every browser lets you view, block and delete cookies and site data, usually under privacy settings. Blocking the strictly necessary items above will sign you out and may stop the generators working; blocking the functional ones only means your preferences are forgotten.
Because the website sets no advertising or tracking cookies, there is currently nothing here to opt out of beyond what your browser already controls.
Changes to this policy
We update this page when what we store changes, rather than on a schedule.
Last updated: 29 July 2026.
Contact
Questions about anything on this page: yawaiapps@gmail.com.