CandysAI Cookie Policy
Version: 2026-10-26 · effective from: 2026-10-26
1. What cookies are
Cookies are small text files saved in your browser by the websites you visit. Browser storage (localStorage) works in a similar way. The CandysAI service (https://candysai.com) is run by samSEO - Adam Smentoch, ul. Aleja Wolności 2c/1, 84-300 Lębork, Poland, NIP 8411683192. Contact: samseo.reklama@gmail.com.
2. Your choice
On your first visit we show a banner in which you choose:
- Necessary: always on; the website does not work without them (sign-in, security, remembering your choices).
- Analytics: visit statistics (Google Analytics). Only with your consent.
- Marketing: measuring advertising effectiveness (Meta Pixel, Google). Only with your consent.
Until you give your consent, analytics and marketing scripts are not loaded at all. You can change or withdraw your consent at any time using the “Cookie settings” link in the footer. You can also delete cookies in your browser settings.
3. Necessary cookies (ours)
| Name | Purpose | How long |
|---|---|---|
candysai-session |
Session: sign-in and app language | 2 hours of inactivity |
XSRF-TOKEN |
Protecting forms against request forgery (CSRF) | 2 hours |
remember_web_… |
“Remember me” at sign-in, only if you tick this option | Until you sign out, at most about 400 days |
trusted_device_… |
Trusted device: we do not ask for an e-mail code at every sign-in | 30 days |
candys_consent |
Your choice in the cookie banner | 1 year |
candys_theme |
Light or dark theme | 1 year |
adult_ok |
Age confirmation (chat, images, creator) | 1 year |
seeking |
Your “Who would you like to meet?” choice on the home page | 1 year |
In browser storage (localStorage) we also save: an unsent draft of a chat message, and the fact that you closed the bar suggesting notifications or a language change. This data never leaves your device.
4. Necessary cookies (third parties)
| Provider | Purpose | When |
|---|---|---|
| Cloudflare Turnstile (Cloudflare, Inc.) | Checking that a form is filled in by a human, not a bot; may save technical files | On the registration and contact pages |
| Stripe | Secure payment | On the Stripe payment page (outside our website) |
5. Analytics cookies (with consent)
| Name | Provider | Purpose | How long |
|---|---|---|---|
_ga |
Google Analytics 4 (Google Ireland Limited) | Distinguishing visitors in statistics | 2 years |
_ga_<identifier> |
Google Analytics 4 | Keeping the session state in statistics | 2 years |
We use Google Consent Mode: without your consent, Google Analytics does not save cookies.
6. Marketing cookies (with consent)
| Name | Provider | Purpose | How long |
|---|---|---|---|
_fbp |
Meta Pixel (Meta Platforms Ireland Ltd) | Measuring the effectiveness of ads on Facebook and Instagram | 3 months |
The Meta pixel is currently turned off. We will only turn it on when we run ads, and even then only with your consent.
7. More information
How we process personal data and what rights you have is described in the Privacy Policy: https://candysai.com/en/privacy-policy.