Cookie Policy
Last updated: 2 September 2026 · Version: 1.4
1. About This Policy
This Cookie Policy explains how Epic Transformations uses cookies and similar technologies when you visit our website. It should be read together with our Privacy Policy.
2. What Are Cookies
Cookies are small text files placed on your device when you visit a website. Similar technologies, such as local storage, the Origin Private File System (OPFS) and IndexedDB, perform comparable functions by storing information on, or reading information from, your device. They can be set by us (first-party) or by third-party providers whose services we use (third-party). In this policy, references to “cookies” include these similar technologies, which are treated the same way under applicable law regardless of the storage method used.
3. Types of Cookies We Use
3.1 Strictly necessary
These are required for the website to function and cannot be switched off in our systems. They include cookies used for authentication and account sessions and for security. This category also includes the local storage used by the in-browser editor – the Origin Private File System (OPFS) for your working files and IndexedDB for related metadata and caching. These technologies are strictly necessary to provide the editor you have chosen to use, store your data only on your own device, and do not require consent. Because they are strictly necessary, they cannot be switched off through the cookie banner.
Our authentication provider (Clerk) sets cookies of this type so that you can sign in and stay signed in, and our infrastructure provider (Cloudflare) sets cookies for security and bot protection.
3.2 Analytics and performance
These help us understand how the Service is used so we can improve it. They are only used where you have given consent, through our cookie banner. We use PostHog for product analytics, including session replay, with data hosted in the European Union. Input fields and page text are masked in session replay, so the content you type is not recorded. These cookies are not set unless you accept them, and declining means no analytics data is collected at all. See thePostHog privacy policyfor how PostHog handles that data.
3.3 Payment-related
Our payment provider may set cookies necessary to process payments securely and to prevent fraud during checkout.
3.4 Cookie details
| Name | Set by | Type | Purpose | Duration |
|---|---|---|---|---|
| Clerk authentication cookies (__clerk_db_jwt*, __client_uat*, __session*, __refresh_*, clerk_active_context, __q_state_*) | Clerk (authentication) | Strictly necessary | Authenticates you, maintains your session and keeps you signed in | Session / up to ~1 year |
| __cf_bm | Cloudflare | Strictly necessary | Bot management and security | ~30 minutes |
| _cfuvid | Cloudflare | Strictly necessary | Security and rate-limiting | Session |
| OPFS (Origin Private File System) | Epic Transformations (local, in your browser) | Strictly necessary | Local storage of your working files in the editor; never sent to our servers | Until you clear it |
| IndexedDB | Epic Transformations (local, in your browser) | Strictly necessary | Local storage of editor metadata and caching; never sent to our servers | Until you clear it |
| ph_<project>_posthog | PostHog (product analytics) | Analytics and performance | Identifies your browser across visits so usage can be measured. Stored both as a cookie and in local storage. Only set after you accept. | Up to 1 year |
| ph_<project>_window_id and ph_<project>_primary_window_exists | PostHog (product analytics) | Analytics and performance | Session storage used to tell browser tabs apart within one visit. Only set after you accept. | Until you close the tab |
| __ph_opt_in_out_<project> | PostHog (product analytics) | Analytics and performance | Local storage recording that you turned analytics off, so it stays off. Written only if you withdraw consent after accepting. | Until you clear it |
| device_id | Epic Transformations | Strictly necessary | Anti-abuse: recognises this device so we can detect large numbers of accounts being created from it. Stored both as a cookie and in local storage. | Up to 1 year |
| analytics-consent | Epic Transformations | Strictly necessary | Local storage recording your answer to the cookie banner, so we do not ask again on every page. | Until you clear it |
Third-party cookies. When you make a purchase, our payment provider Freemius (acting as Merchant of Record) sets its own cookies on its checkout at checkout.freemius.com and on its hosted billing portal, including cookies for payment security, fraud prevention and its own analytics. When you sign in with Google, Google sets its own cookies as part of that sign-in. These cookies are set by those providers on their own domains and are governed by their own privacy and cookie policies, not by this policy.
4. Managing Cookies
Strictly necessary cookies cannot be switched off. Analytics cookies are off until you choose “Accept” on our cookie banner, and they do not run at all if you choose “Decline”. You can change your mind at any time using the “Cookie settings” link in the site footer, which clears your stored choice and shows the banner again; declining stops analytics collection immediately.
You can also control cookies through your browser settings, including deleting or blocking cookies. Blocking strictly necessary cookies may prevent parts of the Service from working.
5. Changes to This Policy
We may update this Cookie Policy from time to time. The current version is always available on our website with its “Last updated” date.
6. Contact
Questions about cookies can be sent to [email protected].