Legal
Cookies (simple guide)
Last updated: August 15, 2026
Cookies are small text files stored by your browser. Promptnator uses a small number of them so the product works. This page is written in plain language - not a lawyer brochure.
What we use cookies for
- Sign-in session (via Clerk) so you stay logged in securely.
- A stable browser id, HMAC-signed and httpOnly, so pre-login device features can work before you create an account.
- Remembering that you accepted the cookie notice (stored in local storage, not a tracking cookie).
- API keys for ChatGPT / Claude / Cursor live in Settings, not in cookies.
What we don’t do with cookies
- We don’t sell cookie data.
- We don’t use advertising “retargeting” cookies in the soft-launch product.
- We don’t load a wall of third-party marketing trackers by default.
Cookie types at a glance
| Name / area | Purpose | Needed? |
|---|---|---|
| Clerk session | Keep you signed in | Essential |
| pn_anon_session | Stable browser id (HMAC signed) for pre-login device identity | Essential |
| pn_owner_key | Links your browser session to local vault ownership before login | Essential |
| Analytics / Sentry | Only if we enable them in production for product health | Optional |
How long they last
Essential signed cookies last up to about 180 days, are httpOnly, and use Secure + SameSite=Lax in production. Auth cookies follow Clerk’s session rules. You can clear cookies anytime in your browser settings - that may sign you out.
Your choices
- Use the “Got it” button on the site notice when you’re fine with essential cookies.
- Block or clear cookies in your browser - some features (login) may stop working correctly.
- Create an account so generation and Vault work under your signed-in identity.
More detail
For personal data beyond cookies, see our Privacy Policy. Questions: hello@promptnator.xyz.