Cookie Policy.
The few cookies we use, and the many we don’t.
Last updated October 2026
1. About this policy
This Cookie Policy explains how Ive Sent It ("we", "us") uses cookies and similar technologies (such as browser local storage) on our website and apps, and how you can manage them. It should be read together with our Privacy Policy, which explains how we handle personal data generally. "Cookies" here includes both cookies set directly by us (first-party) and, in one limited case, by a provider on our behalf (third-party).
2. Our approach
We keep this deliberately minimal. We use only strictly necessary, first-party cookies and local storage to run the Service, plus Stripe's cookies at payment. We do not use advertising, cross-site tracking, or personalisation cookies, and our first-party analytics use no tracking cookies by default. There are two optional items, stored only if you choose Accept all: if you arrived from one of our Google ads, we keep the click reference Google put in the address for 90 days, so a sign-up or purchase on a later visit can still be credited to that ad; and a random first-party identifier that lets our own analytics tell a returning visitor from a new one (section 3). Neither is shared with anyone, and neither exists if you choose Essential only. Note that during the visit itself the click reference is held in memory whatever you choose, and is attached to a sign-up, guest send or purchase you make in that visit so we can report the conversion to Google (see the Privacy Policy). Separately, when you are signed in, our analytics recognise your account across visits through a one-way hash — not your email address — so we can see whether people who sign up keep using the Service; that is part of running your account and does not depend on your cookie choice. Our error and crash reporting (Sentry) sets no cookies and stores nothing in your browser; it is part of keeping the Service working and is described in the Privacy Policy.
3. What we use
Strictly necessary — first-party. These keep the Service working; without them you can't sign in or the site won't function. They can't be switched off through a consent banner.
| What | Purpose | Type | Roughly how long |
|---|---|---|---|
Sign-in session (ise.session) | Keeps you securely signed in — your session tokens, held in your browser | First-party local storage | Until you sign out (rotated automatically while signed in) |
Theme preference (ise.theme) | Remembers light or dark mode | First-party local storage | Until you clear it |
Workspace choice (ise.workspace) | Remembers whether you were working as yourself or in a team | First-party local storage | Until you clear it or sign out |
Preview gate (ise_gate) | Admits you to private pre-release environments — never set on the public site | First-party cookie | 30 days (private pre-release environments only) |
Interface memory (ise.own, ise.*-banner, ise.guestPromptOff) | Remembers which prompts you dismissed and which recent sends are yours, so the site doesn't ask twice | First-party local storage | ise.own 120 days; the rest until you clear them |
Tab id (ise.sid) | A random per-tab id so our own analytics can count a tab's page views as one visit, and so an error report can be matched to the visit that produced it | First-party session storage | Until the tab is closed |
Optional — ad measurement and return visits, first-party, only with "Accept all". Our Google ads add a click reference (gclid, or gbraid/wbraid on iPhone) to the page address. While you stay on the site we keep it in memory only, and attach it to a sign-up, guest send or purchase you make during that visit so the conversion can be reported to Google. If you choose Accept all, we also store it in your browser so that a sign-up or purchase on a later visit within 90 days can be credited to the ad. If, during a visit that came from one of our ads, you tap a link to our iPhone and iPad app, that App Store link names the page the ad led to (for example gads-secure-sending) so Apple's App Analytics can count installs per campaign; it never carries the click reference or anything about you. With the same choice, our own server sets one cookie holding a random identifier, so that our analytics can tell whether a visit is someone's first or a return. It carries nothing about you, is read only by us, and is never joined to advertising.
| What | Purpose | Type | Roughly how long |
|---|---|---|---|
Ad click reference (ise.adclick) | Credits a sign-up or purchase to the Google ad you clicked | First-party local storage — only with "Accept all" | 90 days, or until you choose "Essential only" |
Return-visit identifier (ise_vid) | Lets our own analytics tell a returning visitor from a new one — whether people come back, not who they are | First-party cookie, set by our own server — only with "Accept all" | 13 months, or until you choose "Essential only" |
Your choice (ise.consent) | Remembers whether you chose "Accept all" or "Essential only", so we don't ask again | First-party local storage | Until you clear it |
Payment and fraud prevention — Stripe (third-party). When you open a checkout or payment page, our payments provider Stripe sets its own cookies (for example __stripe_mid and __stripe_sid) strictly to process the payment and detect fraud. These are set only on payment pages, never for advertising. See Stripe's own cookie and privacy notices for details.
4. What we don't use
We do not use Google Analytics or any other third-party analytics, advertising or retargeting cookies, social-media tracking pixels, or cross-site trackers. No Google tag runs on the site. Our analytics are first-party and privacy-preserving (see the Privacy Policy). Error reporting is not analytics: it sends a technical report only when something breaks, with no cookie and no tracking identifier.
5. Managing cookies
Your choice, and where to change it:
You can also control or delete cookies through your browser settings, and clear local storage the same way. Note that blocking strictly necessary cookies will stop you signing in and may break checkout.
6. How long they last
- Session cookies expire when you close your browser.
- Persistent items (such as your theme preference) remain until you clear them; the optional ad click reference is dropped after 90 days and the optional return-visit identifier after 13 months. Choosing "Essential only" removes both at once.
- Stripe's cookies last for the periods Stripe sets (its session cookie is short-lived; its fraud-prevention cookie can persist for up to about a year).
7. International
Data associated with these cookies is processed in the regions described in our Privacy Policy (EU and US), under the safeguards set out there.
8. Changes
We may update this policy to reflect changes in the technologies we use or the law. We will post the updated version with a new date, and ask for your consent again if we ever add anything that needs it.
9. Contact
Questions: privacy@ivesentit.com · Ive Sent It LLC, 30 N Gould St, STE R, Sheridan, WY 82801, USA · UK representative: Ive Sent It Ltd, 30 Bankside Court, Stationfields, Kidlington, OX5 1JE, UK.