Cookies and local storage by purpose.

Necessary authentication and security

A secure HTTP-only session cookie keeps a Google-authenticated session active for up to 30 days and refreshes it at most once per day while used. OAuth state storage protects the sign-in exchange. Signing out removes the current server session.

Necessary workspace and preference storage

IndexedDB caches project snapshots, immutable Asset bytes, Brand Kits, Versions, and workspace preferences for local responsiveness and recovery. Scoped local or session storage keeps the active project, draft campaign brief, selected defaults, and the saved cookie choice.

Optional sign-in convenience

When allowed, Retake may proactively load Google One Tap on selected high-intent pages. This choice is off until accepted. Turning it off does not disable the regular Google sign-in button or prevent you from using Retake.

Analytics measurement and storage

On production pages served from retake.design, Google Analytics 4 measures public-site and Product usage. Before analytics storage is allowed, Consent Mode keeps analytics_storage denied and sends measurements without Analytics cookies. If allowed, it enables first-party Analytics storage for session continuity. Page views use a normalized path without query strings; private project identifiers are replaced by a route placeholder. Localhost, automated browser tests, and Admin are excluded. Retake does not send prompts, Campaign Briefs, document or asset identifiers, emails, file names, image URLs, or card details. Advertising storage, advertising user data, advertising personalization, and Google Signals remain disabled.

Purchase measurement includes a de-identified transaction reference, a fixed plan or top-up identifier, currency and the confirmed amount. Test payments are recorded separately from real purchases.

Regional notice

Cloudflare supplies an approximate country based on the connection IP. Retake uses it to show the cookie notice in the EEA, UK and Switzerland, or when the region cannot be determined. Elsewhere, cookie settings remain available without a proactive notice. This does not grant Analytics storage or One Tap permission; both remain off unless you choose otherwise. Retake does not store the region response or add an IP lookup service for this decision.

Controls

Use Cookie settings to change optional Google One Tap and analytics storage at any time. The same entry remains available in the public-site footer and under Data & privacy in Product Settings. Browser controls can also clear local storage, which may remove local cache data that has not been synchronized.