How we use cookies
Plain-English breakdown of every category of cookie or storage we use, and how to change your mind.
What is a cookie?
A cookie is a small piece of data a website stores in your browser. We also use localStorage for some preferences — different mechanism, same idea: it lets the site remember things between visits. We treat both the same way for consent purposes.
The three categories
1. Strictly necessary (always on)
These keep the app functional. We can’t turn them off because if we did, you couldn’t sign in or pay. They’re exempt from consent requirements under GDPR.
- Authentication session — keeps you signed in across page loads.
- Theme preference — remembers light/dark mode.
- CSRF token — protects you from cross-site attacks.
- Stripe checkout — secures payment flows during checkout.
2. Analytics (opt-in)
We use PostHog (US Cloud) and Vercel Web Analytics to understand how Multivio is used: which features people love, where they get stuck, what slows them down. We never see message content, prompt content, or your media — only metadata about events (e.g. ignite_generation_completed with the model name and a duration).
If you decline analytics we still show you the same product, we just have less information to improve it.
3. Performance (opt-in)
We use Sentry session replay on errors only. When the app crashes or hits an unexpected error, Sentry records the last few seconds of your session so we can see exactly what went wrong and fix it. PII and form fields are masked.
Third parties
The companies that touch this data:
- PostHog — analytics processor (US, SOC 2 compliant). Privacy policy →
- Vercel — hosting + Web Analytics + Speed Insights (US, GDPR DPA available). Privacy policy →
- Sentry — error tracking + session replay (US, GDPR DPA available). Privacy policy →
- Stripe — payment processor (PCI-DSS Level 1). Privacy policy →
- Supabase — auth + database (US/EU regions, GDPR compliant). Privacy policy →
How to change your choice
Click Cookie Settings in the footer of any page to re-open the consent banner. Or clear the multivio-consent-v1 entry in your browser’s localStorage and reload — the banner will reappear on next visit.
What we don’t do
- We don’t sell your data to advertisers.
- We don’t use third-party advertising trackers (no Google Ads pixel, no Meta pixel, no TikTok pixel).
- We don’t train AI models on your content.
Questions
Email us at [email protected] or read the full Privacy Policy.
Last updated: April 14, 2026