incantly1.What cookies and similar technologies are
Cookies are small text files that a website stores in your browser. Similar technologies, such as local storage and IndexedDB, let a website keep data in your browser too, and pixels or SDKs can do the same in emails and apps. In this policy, “cookies” means all of these.
First-party cookies are set by Incantly. Third-party cookies are set by another company’s domain. Session cookies are deleted when you close your browser; persistent cookies stay until they expire or you delete them.
2.How we ask for your consent
In short: Only strictly necessary cookies run by default. Everything else stays off until you say yes, and you can change your mind at any time.
- On your first visit, we show a banner where you can Accept all, Reject all, or Customize your choice by category. Rejecting is as easy as accepting, and no optional category is switched on in advance.
- Until you choose, and whenever you reject, we use only strictly necessary cookies.
- We remember your choice in the
incantly_consentcookie for six months, then ask again. We also ask again if we add new categories or purposes. - We treat a Global Privacy Control signal from your browser as a refusal of marketing cookies, whatever you chose in the banner.
- You can change or withdraw your consent at any time with the Cookie settings link in the footer of every page, or with the button below.
3.Strictly necessary
These are essential to provide the Service you ask for, so they don’t require consent under the EU ePrivacy Directive, UK PECR or the NDPA. They keep you signed in, protect your account, remember your cookie choice, and let your notes work offline.
| Name | Type | Purpose | Duration |
|---|---|---|---|
better-auth.session_token | First-party cookie, HTTP-only | Keeps you signed in and identifies your session securely. On secure connections the name starts with __Secure-. | Up to 7 days, renewed while you use Incantly |
better-auth.session_data | First-party cookie, HTTP-only | A short-lived, signed copy of your session so pages load without re-checking it each time. | A few minutes |
better-auth.state | First-party cookie, HTTP-only | Protects Google sign-in against forgery by linking the request to the response. | Around 10 minutes, during sign-in only |
incantly_consent | First-party cookie | Records your cookie choices and when you made them. | 6 months |
incantly-notes | IndexedDB | Copies of your notes and changes waiting to sync, so Incantly works offline and doesn’t lose edits. | Until synced, you sign out, or you clear site data |
incantly-documents | IndexedDB | Local copies of documents open in the editor. | Until you clear site data |
incantly-assetsincantly-asset-previews | IndexedDB | Images and file previews used in your notes, so they display quickly and offline. | Until you clear site data |
incantly-api | IndexedDB | Remembers uploads and imports in progress, so they resume after a reload and a retry is never applied twice. | Until the upload or import finishes |
incantly-client-id | Local storage | A random identifier for this browser, used to sync edits from several devices without conflicts. It is not used for tracking. | Until you clear site data |
incantly-imports:<account> | Local storage | Tracks files and web pages you are importing, so progress survives a page reload. | Until the import finishes |
4.Preferences
Preference cookies remember choices you make, such as layout and display settings, between visits. We do not currently use any preference cookies. If we add them, we will list them here before switching them on, and they will run only with your consent.
5.Analytics
Analytics cookies help us understand how people use Incantly, such as which features they open, how they move between pages, and where errors happen, so we can improve the Service. We configure analytics to use pseudonymous identifiers and to truncate or mask IP addresses where the tool allows.
We do not currently use any analytics cookies. When we introduce an analytics provider, we will list each cookie here with its provider, purpose and duration, and it will run only if you allow Analytics.
6.Marketing
Marketing cookies and pixels help us measure whether our campaigns work and show relevant Incantly ads on other websites. They may be set by advertising partners, who can combine them with other information they hold under their own privacy policies.
We do not currently use any marketing cookies. If we add them, we will list them here first, they will run only if you allow Marketing, and they will stay off while your browser sends a Global Privacy Control signal.
7.Third-party cookies
If you choose to sign in with Google, you are taken to Google’s sign-in page, where Google sets its own cookies on its domain under the Google cookie policy. We do not control those cookies.
Imported web pages and transcripts are fetched by our servers and shown as text, so they do not place cookies in your browser.
8.Managing cookies in your browser
As well as using Cookie settings, you can block or delete cookies and site data in your browser’s settings. Each browser explains how: Chrome, Safari, Firefox, and Edge.
If you block strictly necessary cookies, you won’t be able to sign in. If you clear Incantly’s site data, notes saved in your browser that have not yet synced will be lost, so make sure you are online and your notes show as saved first.
9.Rules where you live
We apply the same opt-in approach to everyone, which meets the rules in each region we serve:
- European Union: Article 5(3) of the ePrivacy Directive, as implemented in each member state, requires prior consent for storing or reading anything on your device that isn’t strictly necessary. Consent must meet the GDPR standard: freely given, specific, informed and unambiguous.
- United Kingdom: Regulation 6 of the Privacy and Electronic Communications Regulations 2003 (PECR), as amended by the Data (Use and Access) Act 2025, together with the UK GDPR. Although UK law now allows some low-risk analytics without consent, we still ask for it.
- Nigeria: the Nigeria Data Protection Act 2023 and the General Application and Implementation Directive treat cookie identifiers as personal data, requiring a lawful basis and clear information. We rely on consent for all non-essential cookies.
10.Changes and contact
We will update this policy whenever we add, change or remove cookies, and ask for your consent again where needed. The “Last updated” date at the top shows when it last changed. For questions, contact [to be confirmed: privacy email]. For more about how we use personal data, read our Privacy Policy.