Cookie Policy

1. What counts as browser storage

Cookies are small values saved by your browser and sent back with later requests. Session storage stays in the current browser tab and is not sent automatically with every request. AISongGift uses both, but for different purposes.

2. First-party cookies we use

memorysong_session — up to 7 days

This essential, HttpOnly cookie is created when music generation begins. It lets the server return the correct generation status and private previews to the same browser. JavaScript cannot read it. It uses SameSite=Lax and Secure in production.

memorysong_purchase — up to 30 days

This essential, HttpOnly cookie is created only after you open a valid purchase recovery link. It proves access to that specific purchased order; it does not unlock other orders. It uses SameSite=Lax and Secure in production.

better-auth.* — minutes to 7 days

If you choose Google sign-in, Better Auth uses an encrypted or signed OAuth state cookie for about 10 minutes and a session-token cookie for up to 7 days. Production names may carry a __Secure- prefix. These cookies prevent sign-in request forgery and keep you signed in; they are not created merely because you make a song anonymously.

3. Draft storage in the current tab

The session-storage key memorysong:song-draft:v1 keeps the names, occasion, story, language, style, and voice choice you entered. It exists so a refresh or Google sign-in return does not erase the draft. It normally disappears when that browser tab is closed. It is not an advertising identifier and is not shared with other websites.

4. Analytics and advertising

AISongGift currently does not load Google Analytics, Microsoft Clarity, advertising pixels, or marketing cookies. We do not use your story, lyrics, or private audio for advertising. If non-essential analytics are introduced later, this policy will be updated and consent will be requested before they load where required.

5. Google and Creem on their own websites

Choosing Google sign-in opens Google's service, and continuing to payment opens Creem's hosted checkout. Those providers may use cookies on their own domains for authentication, fraud prevention, payment security, preferences, or consent. Their practices are described in the Google Privacy Policy and the Creem Privacy Notice.

6. Your choices

You can inspect, delete, or block storage in your browser settings. Blocking all cookies may prevent music generation status, Google sign-in, purchase recovery, or protected downloads from working. Clearing session storage removes the draft from the current tab but does not cancel a completed purchase.

For more about the personal information connected to these features, read the Privacy Policy.

7. Contact

Questions about browser storage can be sent to support@aisonggift.app.