Cookie policy
Last updated: June 26, 2026
This page explains which cookies and similar technologies Papely uses, for what purpose, and how you can manage them. For more information about how we process your personal data, see our Privacy policy.
1. What is a cookie?
A cookie is a small text file that a website stores on your device to recognize you on later visits or to work properly.
2. Cookie categories
Necessary
Essential for the platform to work: session management, authentication, fraud prevention (CSRF), language selection and remembering your own cookie choice. Always on; they do not require consent.
Functional
Enable extra features such as the support chat. Only enabled with your consent.
Analytics
We use Google Analytics 4 (loaded through Google Tag Manager) to understand in aggregate how the service is used, debug problems and prioritize improvements. Only enabled with your consent.
Marketing
Advertising and campaign-tracking cookies. We use Google Ads (loaded through Google Tag Manager) to measure the conversions of our campaigns and, where applicable, to show ads. Only enabled with your consent.
3. Cookies and technologies we set
| Name | Provider | Purpose | Category | Duration |
|---|---|---|---|---|
better-auth.session_token | Papely | Keep you signed in and authenticate you. | Necessary | Session (up to 7 days) |
NEXT_LOCALE | Papely | Remember your chosen language. | Necessary | 1 year |
papely_consent | Papely | Store your cookie choice. | Necessary | 6 months |
crisp-client/* | Crisp | Keep your support chat conversation (stored in your browser). | Functional | Persistent |
_ga | Google Analytics | Distinguish users for aggregate measurement. | Analytics | 2 years |
_ga_* | Google Analytics | Persist the analytics session state. | Analytics | 2 years |
_gcl_au | Google Ads | Measure campaign conversions (Google Tag Manager Conversion Linker). | Marketing | 90 days |
Analytics and marketing cookies are only set once you accept that category: until then Google Tag Manager runs in denied Consent Mode and no _ga or _gcl_au cookie is written.
Other third parties
During certain actions, some providers set their own cookies on their domains:
- Google — when you sign in with Google or use One Tap.
- Google Ads — if you accept the marketing category, Google may set cookies on its domains (e.g.
google.com,doubleclick.net) to measure conversions and serve ads. - Polar — during checkout and the billing portal.
For error capture we use Sentry, which does not set cookies and is not used for advertising.
4. Managing your preferences
On your first visit we show a banner where you can accept all, reject all or choose by category which cookies to allow. You can also delete stored cookies from your browser settings. Note that disabling necessary cookies will prevent the service from working.
5. Changes
We may update this policy to reflect new technologies or legal changes. The date of the latest update appears at the top of this page.