Cookie Policy

1What cookies are#

Cookies are small text files a website asks your browser to keep, so it can remember something between pages or visits, such as that you’re signed in. Similar tools, like your browser’s local storage, work the same way, and this policy covers them too.

2The cookies we set on site.agency-os.ai#

Most of our cookies are ones AOS Sites needs to do what you ask of it. Two kinds wait for your OK in our consent banner: the referral cookie, and Meta’s ad-measurement cookies.

sb-…-auth-token

Keeps you signed in to your account (set by Supabase, our sign-in provider). Large sessions are split into numbered parts.

Kept: until you log out, at most 400 days; renewed while you use the site

sb-…-auth-token-code-verifier

Proves, when Google sends you back, that the sign-in was started in your browser. Only set if you continue with Google.

Kept: until the sign-in finishes

sage_draft

Links your browser to the site AOS is designing in the chat before you’ve confirmed your email, so nobody else can open it.

Kept: 24 hours, or until you confirm your email

aos_consent

Remembers your answer in our consent banner (accept or reject), so we don’t ask on every page.

Kept: 180 days

Only after you tap Accept:

ss_ref

Remembers the referral link that brought you, so the person who referred you gets credit if you buy (see the Royalty Program Terms).

Kept: 60 days

_fbp, _fbc

Set by Meta’s pixel when we run ads, to measure which ads bring people to AOS Sites. Meta may also recognize you from its own cookies.

Kept: up to 90 days

Our own cookies are first-party, used only by site.agency-os.ai, which is served only over HTTPS. sage_draft and ss_ref can’t be read by scripts on the page. To tell where a visit came from (an ad’s campaign tags, for example), we use a random ID in your browser’s session storage, which is gone when you close the tab, never a cookie.

3Our consent banner#

When something optional could run, such as Meta’s pixel or a referral cookie, a small banner asks first, with Accept and Reject side by side. Nothing optional loads until you tap Accept. If your browser sends a Global Privacy Control signal, we treat it as Reject and don’t ask.

You can change your answer any time with “Your privacy choices” at the bottom of our pages. We don’t use third-party analytics on site.agency-os.ai, and we don’t sell your information.

4Other companies’ pages#

When you pay, you’re on Stripe’s checkout page, and when you continue with Google, you’re on Google’s sign-in page. Those companies set their own cookies there, for example to prevent fraud, under their own policies. Our own fonts are served from our domain. When AOS shows you a brand kit, the fonts it suggests load from Google Fonts, which receives your device’s network address to send them but sets no cookies.

5Sites we host for businesses#

Sites built with AOS Sites set no cookies and load no third-party trackers by default. They count visits without cookies.

If a business adds its own Google Analytics or Meta pixel, its site shows a consent banner with equal Accept and Reject buttons, and those tags load only after a visitor accepts. A Global Privacy Control signal counts as Reject. The visitor’s choice is kept in their browser’s local storage, and a “Your privacy choices” link in the site’s footer lets them change it. Each site’s own privacy page lists the tools it uses.

6Your control#

You can see and delete cookies in your browser’s settings, and block them altogether. If you block the cookies above, AOS Sites can’t keep you signed in or hold your chat draft, but you can still read our pages. Questions: support@site.agency-os.ai.