Vidquel

Last updated:

Cookie Policy

Cookies and similar technologies used by Vidquel.

1. Introduction

This Cookie Policy explains how AI Video Generator Labs Inc. ("we") uses cookies and similar technologies on the Vidquel website and dashboard.

It should be read with our Privacy Policy and Terms of Service.

2. What are cookies?

Cookies are small text files stored on your device. We also use similar technologies such as localStorage (used for theme preference in our ThemeProvider) and session cookies set by authentication and UI components.

3. How we use cookies & storage

3.1 Strictly necessary

Required for login, security, and core dashboard functionality:

  • Better Auth session cookies (sign-in, sign-up, protected routes)
  • Sidebar state cookie (sidebar:state) set by our UI sidebar component to remember collapsed/expanded state — max-age configured in code
  • Cookies required for same-origin API requests that rely on your authenticated session

3.2 Functional (localStorage)

These are not cookies but serve a similar purpose in your browser:

  • Theme preference (light/dark/system) — stored under our theme storage key in localStorage
  • Optional dashboard UI preferences stored in localStorage by dashboard shell components

3.3 Analytics (optional)

When NEXT_PUBLIC_POSTHOG_KEY is configured, we initialize PostHog on the client with:

  • capture_pageview: true — records page views
  • capture_pageleave: true — records when you leave a page
  • Data is sent to PostHog (default host https://us.i.posthog.com unless NEXT_PUBLIC_POSTHOG_HOST overrides)

3.4 Monitoring

Sentry may set or read cookies/identifiers as part of error reporting when the SDK captures client or server errors. Server configuration may include sending default personally identifiable information (sendDefaultPii) — see Sentry project settings.

4. Third-party cookies

When you use checkout, Polar-hosted pages may set their own cookies. Connected social OAuth flows redirect to Google, Meta, LinkedIn, TikTok, X, or Snapchat and may set cookies on those domains. We do not control third-party cookie policies.

5. Service providers (related to cookies & tracking)

The following providers may process personal data in connection with the Service (including via cookies, tokens, or server-side identifiers):

  • Neon (PostgreSQL) — Primary database, including authentication accounts and sessions (Better Auth).
  • Polar — Subscription checkout and billing webhooks (when configured).
  • PostgreSQL database host (e.g. Neon) — Application database for accounts, projects, billing ledger, and chat history.
  • Cloudinary — Hosting generated images, narration audio, uploaded stock media, and export artifacts.
  • Google (Gemini / Google AI) — Script generation, cinematic image generation, TTS, and AI Mentor planning (when API keys are configured).
  • OpenAI — Optional script generation provider (when OPENAI_API_KEY and SCRIPT_LLM_PROVIDER are set).
  • ElevenLabs — Optional text-to-speech (when ELEVENLABS_API_KEY is configured).
  • xAI (Grok) — Optional text-to-speech (when XAI_API_KEY / GROK_API_KEY is configured).
  • Pexels — Stock photo/video search for pipeline and editor media (when PEXELS_API_KEY is set).
  • Pixabay — Optional stock video search for Minecraft-style backgrounds (when PIXABAY_API_KEY is set).
  • PostHog — Product analytics (page views and page leave events) when NEXT_PUBLIC_POSTHOG_KEY is set.
  • Sentry — Error and performance monitoring (SDK initialized in this application).
  • Redis (your deployment) — Job queues for export rendering and batch campaign orchestration (when REDIS_URL is set).
  • Upstash QStash — Scheduled social publishing (when QSTASH_TOKEN is configured).
  • Connected social networks — Publishing only when you connect an account (Google/YouTube, Meta, Instagram, LinkedIn, TikTok, X, Snapchat OAuth).

6. Your choices

[PLACEHOLDER — before marketing to EEA/UK users, implement a cookie consent banner that blocks non-essential analytics until accepted, and document the tool here.]

  • Block or delete cookies via browser settings (may break login or dashboard features)
  • Use browser Do Not Track or Global Privacy Control — we do not guarantee uniform response unless we implement a dedicated consent platform
  • Opt out of PostHog by blocking analytics scripts (not loaded without NEXT_PUBLIC_POSTHOG_KEY) or using browser extensions
  • Sign out to clear authentication session cookies for this site

7. Retention

Session cookies expire when you close the browser or sign out. Persistent cookies and localStorage last until deleted or until their configured max-age. Analytics retention follows PostHog and Sentry project settings.

8. Updates

We may update this Policy. Check the Last updated date at the top of the page.

9. Contact

Questions: privacy@example.com