Cookie Policy
Last updated: 8 September 2026
Cookies we set
| Name | Purpose | Duration | Category |
|---|---|---|---|
better-auth.session_token | Keeps you signed in. Without it every page load would log you out. | Session, extended while you stay active | Strictly necessary |
better-auth.csrf_token | Protects sign-in and account forms against cross-site request forgery. | Session | Strictly necessary |
{platform}_oauth_state | A short-lived random value that proves an OAuth redirect came back from the platform you started at, rather than an attacker. Set for tiktok, instagram, linkedin, youtube, threads and facebook while you connect that account. | 10 minutes | Strictly necessary |
theme | Remembers whether you chose the dark or light theme. Only set when you use the theme switcher. | 1 year | Preference |
locale | Remembers whether you chose English or Indonesian. Only set when you use the language switcher. | 1 year | Preference |
_fbp | Set by the Meta Pixel to measure whether an ad we ran led to a signup. Only set if you accept advertising cookies, and never before. | 90 days | |
fr | Set by Meta on its own domain to link an ad click to your Meta account. Only set if you accept advertising cookies. | 90 days |
All of these are first-party cookies, set by creasionapp.com itself, readable only by us.
Third-party services
Meta (Facebook) Pixel: Advertising measurement. Only on public pages, and only after you accept advertising cookies. It is never loaded before you choose, and choosing reject means it is not loaded at all. With your consent we also report account creation and subscription to Meta from our server, with your email and account id hashed. See their privacy policy.
Paddle: Payment processor and Merchant of Record. Only on the billing screen in your account, after you are signed in. It is not loaded on any public page. See their privacy policy.
No other third-party script runs on this site. Public pages, including this one, load nothing from anyone else.
Controlling cookies
Every browser lets you view, block and delete cookies through its settings. Blocking the strictly necessary ones will sign you out and prevent you from connecting a social account, because those cookies are what keep the session and the OAuth handshake secure. Blocking the preference cookies simply means the site forgets your theme and language between visits.
Advertising cookies are different: they are not set unless you accept them, and rejecting them is a real reject rather than a dismissal that quietly allows them. You can change your mind at any time with the button below, and withdrawing is deliberately the same single click as accepting.
One limit worth stating plainly: withdrawing stops us loading the Meta Pixel from that moment on, but we cannot reach into cookies Meta already set on its own domain. To remove those you would clear cookies for facebook.com in your browser, or use Meta's own off-Facebook activity controls.
Questions
Email support@creasionapp.com. See also our Privacy Policy, which covers the personal data we process and your rights under the GDPR.