On this page
- What cookies and similar technologies are
- How we categorise cookies
- Cookies and storage we use today
- Strictly necessary
- Functional
- Analytics
- Marketing
- Other storage technologies
- Fonts are self-hosted
- Managing your choices
- Global Privacy Control
- Storing your consent
- U.S. privacy choices (Do Not Sell or Share)
- Changes to this Cookie Policy
- Contact us
Cookie Policy
How Inoue AI uses cookies and similar storage technologies, what each one does, and how to control them. Today we set only first-party, strictly-necessary cookies — no advertising or analytics trackers.
Last updated · v1.0
Who we are
- Controller
- ClipVision, Ltd. (trading as Inoue AI)Via Giacomo Matteotti 5521020 Barasso (Varese), Italy
- Privacy & data requests
- [email protected]
- General support
- [email protected]
This Cookie Policy explains how ClipVision, Ltd. (“Inoue AI”, “we”, “us”) uses cookies and similar storage technologies on inoue.app and our web application. It describes what these technologies are, the specific cookies we set, why we set them, how long they last, and the choices available to you. It forms part of, and should be read together with, our Privacy Policy, which explains how we handle personal data more broadly.
What cookies and similar technologies are
A cookie is a small text file that a website asks your browser to store and send back on later requests. Cookies are widely used to make sites work, to keep you signed in between page loads, and to protect against certain attacks. A cookie is “first-party” when it is set by the site you are visiting (here, Inoue AI) and “third-party” when it is set by a different domain, typically for advertising or cross-site analytics.
“Similar technologies” covers other ways an application can store data in your browser — for example the Web Storage API (localStorage and sessionStorage), the Cache Storage used by a Progressive Web App service worker, and the Web Push subscription created by the browser’s push service. Where these technologies serve a comparable purpose to cookies, we describe them in this policy so you have a complete picture of what is stored on your device.
How we categorise cookies
We group cookies and similar technologies into four categories. This is the same framework used by our Cookie Preferences control, so the labels you see here match the toggles you can set there.
- Strictly necessary — always on. Required for the service to function: signing in, keeping your session active, and protecting security-sensitive flows such as connecting a social account. These cannot be switched off through the preferences control because the application would not work without them, and under the ePrivacy rules they do not require consent.
- Functional — off by default. Remember choices you make to improve your experience, such as whether you have completed the first-run onboarding. Today this is a single device-local preference and not a server cookie.
- Analytics — off by default. Would help us understand how the product is used so we can improve it. We do not use any analytics cookies or third-party analytics services today, so this category is currently empty.
- Marketing — off by default. Would be used for advertising or measuring advertising campaigns. We do not use any marketing or advertising cookies, pixels, or trackers, so this category is currently empty.
Cookies and storage we use today
Every cookie in the tables below is first-party (set by Inoue AI on our own domain) and strictly necessary. We do not set any cookie before you act — the authentication cookies are created only after you sign in, and the OAuth security cookies only when you start connecting a social account, and they are removed as soon as that flow completes.
Strictly necessary
These cookies are essential for authentication and security. Unless noted, they are set with the HttpOnly flag (not readable by JavaScript), the Secure flag (sent only over HTTPS in production), and SameSite=Lax (not sent on cross-site requests).
| Name | Purpose | Provider / domain | Party | Lifespan |
|---|---|---|---|---|
refresh_token | Maintains your signed-in session by issuing new short-lived access tokens. Single-use and rotated on every refresh. | Inoue AI (inoue.app) | First-party | 30 days |
inoue_access | Short-lived, server-readable mirror of your access token so pages can be rendered for you on the server without exposing the token to JavaScript. | Inoue AI (inoue.app) | First-party | 15 minutes |
admin_refresh_token | Maintains a separate administrator session for the internal admin console. Set only for administrator sign-in, never for ordinary users. | Inoue AI (inoue.app) | First-party | 30 days |
tiktok_oauth_state | Cross-site request forgery (CSRF) protection while you connect a TikTok account. Removed when the connection completes. | Inoue AI (inoue.app) | First-party | 10 minutes |
tiktok_code_verifier | PKCE code verifier that secures the TikTok authorization exchange. Removed when the connection completes. | Inoue AI (inoue.app) | First-party | 10 minutes |
threads_oauth_state | CSRF protection while you connect a Threads account. Removed when the connection completes. | Inoue AI (inoue.app) | First-party | 10 minutes |
fanvue_oauth_state | CSRF protection while you connect a Fanvue account. Removed when the connection completes. | Inoue AI (inoue.app) | First-party | 10 minutes |
fanvue_oauth_verifier | PKCE code verifier that secures the Fanvue authorization exchange. Removed when the connection completes. | Inoue AI (inoue.app) | First-party | 10 minutes |
inoue_consent | Stores your cookie-preference choices so we can remember them and apply them on future visits. Created only once you make a choice; classified as strictly necessary because it records your consent. | Inoue AI (inoue.app) | First-party | 1 year |
Functional
We use one functional storage entry today. It is stored in your browser’s localStorage rather than as a cookie, so it is never transmitted to our servers and stays on the device where it was set.
| Name | Purpose | Provider / domain | Party | Lifespan |
|---|---|---|---|---|
inoue.onboarding.v1.<userId> | Remembers, per user and per device, whether you have completed or skipped the first-run onboarding so we do not show it again. Stored in localStorage; never sent to our servers. | Inoue AI (inoue.app) | First-party | Persistent until cleared |
Analytics
None. Inoue AI does not use analytics cookies, and we do not embed Google Analytics, Google Tag Manager, Meta Pixel, Segment, PostHog, Mixpanel, Hotjar, Plausible, or any comparable third-party analytics or tag-management service. The usage and revenue dashboards inside the product are powered by our own backend from data you generate, not by browser trackers.
Marketing
None. We do not use marketing or advertising cookies, conversion pixels, retargeting tags, or cross-site identifiers of any kind.
Other storage technologies
For completeness, the application uses a small number of non-cookie storage mechanisms. None of these are used for tracking.
- In-memory access token. Your short-lived access token is held only in the page’s memory while a tab is open and is deliberately never written to localStorage or sessionStorage. It is discarded when you close the tab — this is a security measure, not persistent storage.
- Service worker cache. If your browser installs our Progressive Web App, a service worker caches static, versioned application assets (such as scripts, styles, and brand images) so the app loads quickly and works offline. It never caches your API responses, pages, or any authenticated or personal data, and old versions are evicted automatically.
- Web Push subscription. If you explicitly enable notifications, your browser creates a push subscription so we can deliver alerts you have asked for. This is created only after you opt in and can be revoked at any time from your browser or notification settings.
Fonts are self-hosted
Inoue AI uses web fonts (Geologica and JetBrains Mono) for its typography. These fonts are downloaded when we build the application and are served directly from our own domain. As a result, viewing any page on Inoue AI sends no request to Google Fonts or any other font provider, and no third-party font cookie is set. This is a deliberate privacy-by-design choice that avoids transferring your IP address to a font host.
Managing your choices
You can review and change your cookie choices at any time using the “Cookie preferences” control in the site footer, which re-opens the consent preferences panel on any page. Because withdrawing consent must be as easy as giving it, this control is available everywhere the footer appears.
- Cookie preferences control. Opens the preferences panel where you can allow or reject each non-essential category and save your choice. Strictly-necessary cookies are shown for transparency but cannot be turned off.
- Browser settings. Most browsers let you view, block, or delete cookies and site storage through their privacy or site-data settings, and to clear them for a specific site.
- Global Privacy Control. If your browser or an extension sends a Global Privacy Control (GPC) signal, we honour it as a valid opt-out of any non-essential cookies and of any sale or sharing of personal information.
Global Privacy Control
Global Privacy Control (GPC) is a browser-level signal that communicates an opt-out preference automatically. Where we receive a GPC signal, we treat it as a request to opt out of any non-essential cookies and of any sale or sharing of personal information. Because we do not currently set non-essential cookies and do not sell or share personal information, honouring GPC does not change what loads today — but the signal is respected so your preference is enforced if that ever changes.
Storing your consent
When you make a cookie choice, we store it in the first-party inoue_consent cookie described above (lifespan one year). This cookie is itself classified as strictly necessary because its only purpose is to remember and apply your decision. We may also keep a minimal record of your consent — such as the categories chosen, the time of the choice, and the version of this notice — as evidence that consent was obtained. We will ask you again if this policy materially changes or after your stored choice expires.
U.S. privacy choices (Do Not Sell or Share)
Inoue AI does not sell your personal information and does not share it for cross-context behavioural advertising, as those terms are used under U.S. state privacy laws such as the California Consumer Privacy Act. There is therefore nothing for you to opt out of in that respect. We nonetheless honour Global Privacy Control signals and, for residents of applicable U.S. states, additional rights are described in our Privacy Policy.
Changes to this Cookie Policy
We may update this Cookie Policy to reflect changes to the cookies and technologies we use or to legal requirements. When we make material changes, we will update the effective date shown at the top of this page and, where required, ask for your consent again before any new non-essential cookies are set. We encourage you to review this page periodically.
Contact us
If you have questions about our use of cookies or this policy, contact us at [email protected] or by writing to the controller address below.
- Data controller
- ClipVision, Ltd. (trading as Inoue AI)Via Giacomo Matteotti 5521020 Barasso (Varese), Italy
- Privacy & data requests
- [email protected]
- General support
- [email protected]