Cookie Policy

Effective Date: October 1, 2026

1. Introduction to Cookies

This Cookie Policy explains how EroGrid ("Company", "we", "us", or "our") uses cookies, local storage, and similar tracking technologies when you visit or interact with our platform (the "Services"). This policy is designed to comply with the strict requirements of the ePrivacy Directive and the General Data Protection Regulation (GDPR) of the European Union.

A cookie is a small text file stored on your device that helps us recognize you, remember your preferences, and ensure the cryptographic security of your session.

2. Principle of Active Consent

In strict compliance with EU law, EroGrid does not rely on implied consent. We will not deploy non-essential tracking, marketing, or third-party analytics cookies to your device without your explicit, opt-in consent via our Cookie Management Banner.

You may withdraw or modify your consent at any time from your Account Settings.

3. Categories of Cookies We Use

3.1 Strictly Necessary Cookies (No Consent Required)

These cookies are technically essential for the core operation of EroGrid. Without these, the platform cannot function securely. Because they are vital, the GDPR permits their deployment without explicit consent.

• Authentication Tokens: We use secure, HttpOnly, SameSite=Strict cookies managed via Supabase Auth to maintain your login session and cryptographic identity.
• Security & Anti-CSRF: Tokens required to prevent Cross-Site Request Forgery (CSRF) and mitigate DDoS patterns.
• Age Verification State: A localized flag indicating whether you have passed the mandatory 18+ age verification gateway, ensuring compliance with minor-protection laws.

3.2 Preferences & Customization Cookies

These cookies allow the platform to remember your UI choices and inference configurations.

• Theme and Locale: Remembering your preference for dark mode and your chosen language interface.
• Studio Settings: Locally caching your preferred AI model weights, default aspect ratios, and CFG scale settings to provide a seamless generation experience across sessions.

3.3 Analytics & Performance (Cookieless, No Consent Required)

We use PostHog Cloud (EU region) as our product analytics tool in strict cookieless mode: events are processed in the browser's volatile memory, without storing cookies, localStorage or any other data on your device, and without logging IP addresses.

• What we measure: Page load speeds, API latency, and concrete functional funnel events (e.g., coin searches with no results, invoice generation errors) to optimize our infrastructure and service. Event identity is limited to identified users; anonymous visitors produce only aggregated events with no persistent profile.
• Why no banner is needed: The ePrivacy Directive (Art. 5.3) requires consent for storing or accessing information on your device. Because we store nothing, that obligation does not apply; the processing rests on our legitimate interest (Art. 6.1.f GDPR) in operating and improving the service, and you may object to it via the privacy section.

3.4 Third-Party & Marketing Cookies (Requires Consent)

EroGrid does not run external display advertising networks. However, certain third-party integrations may utilize cookies if you interact with them:

• Payment Gateways: MoonPay Commerce, BTCPay Server and Bitcart may set cookies strictly during the checkout process to securely process card or cryptocurrency transactions and detect fraud.

4. Managing Your Cookies

You maintain total control over your local storage and cookies:

1. EroGrid Settings: Navigate to the "Privacy & Security" tab in your profile to toggle non-essential cookies.
2. Browser Controls: You can configure your browser to block all cookies. However, disabling "Strictly Necessary" cookies will prevent you from logging in or generating content on EroGrid.

5. Contact Information

For any questions regarding our use of cookies or technical implementation details, please contact our Data Protection Officer at dpo@erogrid.com.