Cookie Policy

Last updated: 30 October 2026. This page lists every cookie and browser-storage item BPMN Studio sets, and lets you change your choice at any time. For the wider picture, see the Privacy Policy.

Change your choice

Open cookie settings →

That link reopens the preferences panel wherever you are on the site. Your choice is stored on your own device and applies across the app and every article page.

What we set

Strictly necessary

These are required for the site to work. They are set without consent, because without them you cannot sign in or pay, and EU law exempts them for that reason.

Name	Provider	Type	Duration	Purpose
bs_consent	BPMN Studio	localStorage	12 months	Remembers your cookie choice so you are not asked on every page
sb-*-auth-token	Supabase	localStorage	Session / until sign-out	Keeps you signed in
__stripe_mid	Stripe	Cookie	1 year	Payment fraud prevention
__stripe_sid	Stripe	Cookie	30 minutes	Payment fraud prevention during checkout

The Stripe cookies are set only when you begin a checkout. The app also keeps interface state in localStorage: the canvas theme, the project and diagram you last opened, your chosen model, and cached diagram thumbnails so the library loads quickly. These are not cookies, are never sent to us or anyone else, and exist only to make the app work as you left it.

Analytics - optional

Set only after you accept the Analytics category.

Name	Provider	Type	Duration	Purpose
_ga	Google	Cookie	2 years	Distinguishes one visitor from another
_ga_YD5QV8N989	Google	Cookie	2 years	Maintains the analytics session state
_clck	Microsoft Clarity	Cookie	1 year	Keeps the same Clarity ID across visits
_clsk	Microsoft Clarity	Cookie	1 day	Joins page views into one recorded session
CLID	Microsoft Clarity (clarity.ms)	Cookie	1 year	Identifies the first time Clarity saw this browser
MUID	Microsoft (clarity.ms)	Cookie	1 year	Microsoft's browser identifier, used by Clarity
ANONCHK, SM, MR	Microsoft (clarity.ms)	Cookie	Session to 7 days	Short-lived Clarity session and routing cookies
ph_phc_…_posthog, ph_phc_…_posthog_cpm	PostHog	Cookie and localStorage	1 year	Keeps the same anonymous PostHog ID and session across visits
__ph_opt_in_out_phc_…	PostHog	localStorage	1 year	Remembers that PostHog may (or may no longer) collect, after you change your choice

Microsoft Clarity and PostHog record how pages are used (clicks, scrolls, layout) so we can see where people get stuck. Text on the page and everything typed into fields is masked in the recordings, so your process descriptions and diagrams are not captured. PostHog also counts product events, such as a diagram being generated or exported, and reports errors the app hits, so we can fix them. Those events record what kind of action happened (for example "edited a diagram", how long it took), never what you wrote: your chat messages, process descriptions and diagram, project and people names are not sent to PostHog. PostHog is loaded on this site and in the app only after you accept; until then its script is not even downloaded.

We also use Vercel Web Analytics for aggregate page-view counts. It sets no cookies and stores no identifier on your device, so it runs for every visitor without needing consent.

We set no marketing or advertising cookies. No advertising or remarketing pixel is installed. If that ever changes, it will be added here as a new category and you will be asked first.

What happens before you choose

We want to be straightforward about this, because "no cookies until you consent" is often stated and rarely true.

The page loads Google Tag Manager, the container that holds the Google Analytics and Clarity tags. Both tags are configured to require your analytics consent, so until you accept:

• they do not run at all, set no cookies and send no analytics data
• the only Google request is for the Tag Manager script itself, which, like any file download, shows Google your IP address

When you accept, the tags start on the spot, without a page reload. When you reject, they never start, and no _ga or Clarity cookie is ever created.

If you would rather not contact Google at all, the browser controls below block it entirely.

Verifying this yourself

You do not have to take our word for it. In your browser's developer tools, on a fresh visit, before choosing:

• Application → Cookies: there is no _ga, _clck, _clsk or ph_ cookie.
• Network: there are no requests to google-analytics.com, clarity.ms or /ingest (PostHog, sent through our own domain). They appear only after you accept.

Blocking cookies in your browser

Every major browser can block or clear cookies independently of this site:

• Chrome - Settings → Privacy and security → Third-party cookies / Delete browsing data
• Firefox - Settings → Privacy & Security → Cookies and Site Data
• Safari - Settings → Privacy → Manage Website Data
• Edge - Settings → Cookies and site permissions

Blocking strictly necessary storage will sign you out and may break checkout. Blocking analytics storage is harmless - the site works identically.

Browser "Do Not Track" and Global Privacy Control signals are not a reliable standard across browsers, so we rely on your explicit choice in the banner rather than inferring one.

Questions

Email mikalajunas.emilis@gmail.com. If we add or remove a cookie, this table is updated and the Last updated date changes; a new purpose re-prompts you.