LEGAL

Cookie policy

Updated April 22, 2026. Every cookie we set, what it's for, and how to withdraw consent in one click.

The short version

pdfcraft ai uses a small number of cookies. Three are essential (sign-in, CSRF, remembering your consent choice) and always load. Two product-analytics services — Google Analytics 4 and Microsoft Clarity — only load if you accept. We do not run advertising cookies and we do not sell data.

Change your mind at any time

Under GDPR Art. 7(3) and DPDP Act 2023 s. 6(3), withdrawing consent must be as easy as giving it. This button deletes your stored consent choice — the banner will reappear on the next page and analytics will stop loading unless you re-accept.

Every cookie, in detail

Cookie	Category	Purpose	Duration	Provider
pdfcraft_consent	ESSENTIAL	Remembers your cookie-consent choice (Accept all / Essential only) so we don't re-ask on every page.	365 days	pdfcraft ai (first-party)
authjs.session-token	ESSENTIAL	Keeps you signed in. Contains an opaque JWT identifier, nothing personal.	30 days	pdfcraft ai (first-party, NextAuth v5)
authjs.csrf-token	ESSENTIAL	CSRF protection for the sign-in flow. Required for security — cannot be disabled.	Session (cleared when you close the browser)	pdfcraft ai (first-party, NextAuth v5)
_ga, _ga_<STREAM_ID>	ANALYTICS	Google Analytics 4 client identifier. Counts unique visitors and builds aggregate usage reports. IP anonymization is on; advertising identifiers are off.	Up to 2 years	Google LLC (third-party)· 🌐
_clck, _clsk	ANALYTICS	Microsoft Clarity session identifiers. Used for session replay and heatmaps so we can see where the UI is confusing.	Up to 1 year	Microsoft Corporation (third-party)· 🌐

🌐 = provider is based outside the EEA / UK / India. Transfers rely on the EU Standard Contractual Clauses, the UK International Data Transfer Addendum, and for Indian residents the DPDP Act s. 16 safeguards.

Browser controls

You can also delete cookies directly in your browser's settings (e.g., Chrome → Settings → Privacy and security → Cookies). Deleting the pdfcraft_consent cookie has the same effect as pressing "Reset cookie preferences" above. Deleting the session cookies will sign you out.

Questions

Email support@pdfcraftai.com. Indian residents can also contact our Grievance Officer via the same address — response within 15 days per DPDP Act s. 8(10).