Cookies and similar technologies
What we store in your browser, and which parts are optional.
We use a small number of cookies and browser storage keys. Most are needed to make signing in work at all. Two groups — analytics, and advertising measurement — are optional, and each is only ever used if you choose it.
Optional cookies only run if you say yes
You can manage each optional group separately, and a yes to one is not a yes to the other. Until you say yes to a group, nothing for it runs or is stored: the analytics script is not downloaded at all, and no advertising cookie is set. Saying no, and not answering, are treated the same way.
You can change your mind about either at any time using Cookie preferences in the footer.
Strictly necessary
| Name | Set by | Purpose | Lasts |
|---|---|---|---|
authjs.session-token | Jinova | Keeps you signed in. It is a reference to a session we hold, not a store of your details | Until the session expires or you sign out |
authjs.csrf-token | Jinova | Protects sign-in against cross-site request forgery | The browser session |
authjs.callback-url | Jinova | Returns you to the right page after signing in | The browser session |
authjs.state, authjs.pkce.code_verifier | Jinova | Used only while signing in with Google or Microsoft, to secure that exchange | Minutes |
jinova_analytics_consent | Jinova | Remembers your analytics choice. It holds only “granted” or “denied” and identifies nobody. Without it we could not honour your choice | 6 months |
jinova_ads_consent | Jinova | Remembers your advertising measurement choice, in the same way. It holds only “granted” or “denied” and identifies nobody | 6 months |
Analytics — only with your consent
| Name | Set by | Purpose | Lasts |
|---|---|---|---|
_ga, _ga_… | Google Analytics | Tells returning visits apart so we can see how the console is used | Set and managed by Google Analytics |
jinova.analytics.login, jinova.analytics.topup.… | Jinova (browser session storage) | Stops the same event being counted twice on a refresh | Cleared when you close the tab |
What we send to analytics is deliberately limited: which page you are on, which tool you used, broad bands rather than exact amounts, and whether an account is new. We do not send your files, your results, anything you type into the search box, exact amounts, or job identifiers.
Advertising measurement — only with your consent
Our ads appear in ChatGPT. When you arrive from one of them, the link carries a reference OpenAI added to it. If you allow advertising measurement, we remember that reference so we can learn whether the ad worked.
| Name | Set by | Purpose | Lasts |
|---|---|---|---|
jinova_ads_oppref | Jinova | Holds the reference from the OpenAI ad you arrived from, so a later sign-up or credit purchase can be linked to that ad. Only set if you arrived from one | 30 days |
When you then sign up or buy credit, our servers tell OpenAI, with that reference and, for a purchase, its amount and currency. Each report also includes a fixed page address that our servers set for that kind of event — our sign-in page for a sign-up, our wallet page for a purchase. That fixed address is the only page address OpenAI receives from us.
No OpenAI script runs on these pages, so OpenAI does not receive or observe anything from your browser: not the address actually in your browser or its query string, not a run identifier or a Stripe payment reference, and not your IP address. We do not send your name, your email address, your files, your results, or anything you type.
If you say no, or withdraw later, we delete the cookie and report no further sign-up or purchase to OpenAI — except a credit purchase you had already started at checkout before withdrawing. Withdrawing does not undo reports already sent.
Payments
Card payments happen on Stripe’s own pages. Stripe sets no cookies on this site.