Cookie policy
Last updated: October 16, 2026
This page explains which cookies and similar technologies Papely uses, for what purpose, and how you can manage them. For more information about how we process your personal data, see our Privacy policy.
1. What is a cookie?
A cookie is a small text file that a website stores on your device to recognize you on later visits or to work properly.
2. Cookie categories
Necessary
Essential for the platform to work: session management, authentication, fraud prevention (CSRF), language selection and remembering your own cookie choice. Always on; they do not require consent.
Functional
Enable extra features such as the support chat. Only enabled with your consent.
Analytics
We use Google Analytics 4 (loaded through Google Tag Manager) to understand in aggregate how the service is used, debug problems and prioritize improvements. Only enabled with your consent. With the same consent we also store, in a first-party cookie, the channel you arrived through (an ad, a search engine, another site…), to learn which channels bring users.
Marketing
Advertising and campaign-tracking cookies. We use Google Ads and the OpenAI Ads and Meta Ads pixels (all loaded through Google Tag Manager) to measure the conversions of our campaigns and, where applicable, to show ads. Only enabled with your consent.
3. Cookies and technologies we set
| Name | Provider | Purpose | Category | Duration |
|---|---|---|---|---|
better-auth.session_token | Papely | Keep you signed in and authenticate you. | Necessary | Session (up to 7 days) |
NEXT_LOCALE | Papely | Remember your chosen language. | Necessary | 1 year |
papely_consent | Papely | Store your cookie choice. | Necessary | 6 months |
crisp-client/* | Crisp | Keep your support chat conversation (stored in your browser). | Functional | Persistent |
_ga | Google Analytics | Distinguish users for aggregate measurement. | Analytics | 2 years |
_ga_* | Google Analytics | Persist the analytics session state. | Analytics | 2 years |
papely_channel | Papely | Remember the channel you arrived through (ad, search engine, another site…). | Analytics | 30 days |
_gcl_au | Google Ads | Measure campaign conversions (Google Tag Manager Conversion Linker). | Marketing | 90 days |
__obref | OpenAI | Identify the browser to attribute conversions to OpenAI Ads campaigns. | Marketing | 1 year |
__oppref | OpenAI | Store the click identifier when you arrive from an OpenAI ad. | Marketing | 30 days |
_fbp | Meta | Identify the browser to attribute conversions to Meta Ads campaigns. | Marketing | 90 days |
_fbc | Meta | Store the click identifier when you arrive from a Meta ad. | Marketing | 90 days |
Analytics and marketing cookies are only set once you accept that category: until then Google Tag Manager runs in denied Consent Mode, the OpenAI and Meta pixels are not loaded, and no _ga, _gcl_au, __obref, __oppref, _fbp or _fbc cookie is written.
Other third parties
During certain actions, some providers set their own cookies on their domains:
- Google — when you sign in with Google or use One Tap.
- Google Ads — if you accept the marketing category, Google may set cookies on its domains (e.g.
google.com,doubleclick.net) to measure conversions and serve ads. - OpenAI — if you accept the marketing category, the OpenAI Ads pixel sends our campaigns' conversion events to
openai.com. - Meta — if you accept the marketing category, the Meta Ads pixel sends page visits and sign-ups to
facebook.com. - Polar — during checkout and the billing portal.
For error capture we use Sentry, which does not set cookies and is not used for advertising.
4. Managing your preferences
On your first visit we show a banner where you can accept all, reject all or choose by category which cookies to allow. You can also delete stored cookies from your browser settings. Note that disabling necessary cookies will prevent the service from working.
5. Changes
We may update this policy to reflect new technologies or legal changes. The date of the latest update appears at the top of this page.