Cookie Policy
About this policy
PRONTO LLC, which operates Faive ("Faive", "we", "us"), uses essential cookies and similar technologies to keep you signed in and keep the site working, and one optional analytics tool, PostHog, only if you accept it in the cookie banner. This policy lists everything the site at faive.studio stores on your device, who sets it, and how to change your choice.
It is linked from the cookie banner, the footer of our website and the sidebar in the app. Please read it together with our Privacy Policy, which explains how we handle personal information more broadly.
What cookies and similar technologies are
A cookie is a small text file a website stores in your browser and reads back on later visits, for example to recognise that you are signed in. We also use technologies that work in a similar way, and this policy covers them in the same way:
- Local storage keeps small pieces of data in your browser until you or the site clear them.
- Session storage is like local storage, but is cleared when you close the tab.
- Software development kits (SDKs) are code libraries from other companies that run in the page. The only one we load is the PostHog analytics SDK. It collects and sends no analytics until you accept; if you reject, it only stores a record of that choice.
We do not use advertising cookies, tracking pixels or social media plugins.
How we use them
There are two categories, matching the choices in the cookie banner.
Strictly necessary. These keep the site working: they hold your sign-in session, remember small interface settings and in-progress actions, and remember your cookie choice so we don't ask again. They are set without consent because the site cannot work properly without them. You can delete them in your browser, but you will be signed out.
Analytics (optional, off by default). If you accept, we use PostHog to understand how Faive is used: which pages are visited, which features are used, and which websites and campaigns people arrive from. Clicks are recorded only as the type and position of the element clicked, never its text, links or other details. We do not record what you type, your prompts or your images. Web addresses are filtered before they are sent, so no tokens or personal details in them are recorded, and advertising click identifiers are masked. Session recording, heatmaps, dead-click tracking, error capture and surveys are switched off in our code, so they cannot be turned on without a code change. No analytics data is stored on your device or sent to PostHog until you choose Accept (if you choose Reject, only a record of that choice is stored), and rejecting takes the same single click.
We do not use advertising or marketing cookies, and we do not sell or share your information for advertising.
Cookies and storage we use
Everything the site stores on your device, grouped to match the banner. <project> stands for our PostHog project identifier.
Strictly necessary
| Name | Type | Set by | Purpose | Duration |
|---|---|---|---|---|
access_token | Cookie (HttpOnly) | Faive | Keeps you signed in | 15 minutes |
refresh_token | Cookie (HttpOnly) | Faive | Renews your sign-in without asking you to log in again | 7 days |
faive:analytics-consent | Local storage | Faive | Remembers your cookie choice, when you made it, and which banner wording you answered | Until cleared |
__ph_opt_in_out_<project> | Local storage | PostHog | Records your analytics answer for the PostHog SDK. Written only once you answer, Accept or Reject | Until cleared |
faive:signup-claim | Session storage | Faive | Carries a cookie choice made before sign-up over to your new account | Until the tab closes |
faive:signup-email | Session storage | Faive | Shows your email address on the email verification screen | Until read, or the tab closes |
faive:auth-prompt | Session storage | Faive | Explains why the sign-in window opened | Until the tab closes |
faive:pending-adopt | Session storage | Faive | Resumes a "Use this" action on Discover after you sign in | Until the tab closes |
faive:sidebar-collapsed | Local storage | Faive | Remembers whether you collapsed the sidebar | Until cleared |
library.railWidth | Local storage | Faive | Remembers the width of your library panel | Until cleared |
Analytics (only after you accept)
| Name | Type | Set by | Purpose | Duration |
|---|---|---|---|---|
ph_<project>_posthog | Cookie and local storage | PostHog | Random analytics identifier and current session | 1 year |
ph_<project>_window_id, ph_<project>_primary_window_exists, ph_<project>_session_registered_properties | Session storage | PostHog | Ties the events in one tab to one session | Until the tab closes |
faive:attribution | Local storage | Faive | The website and campaign tags you arrived from, saved to your account when you sign up | Until cleared, or until you reject analytics |
If you reject analytics, the Analytics items are never written, and any earlier faive:attribution record is deleted.
Bot protection on sign-in. When you open the sign-in or sign-up form, we load Cloudflare Turnstile, a security check that confirms you are a real person. It receives your IP address and browser information to run the check. It does not set cookies on faive.studio.
Third parties
| Provider | What they do | Where data goes |
|---|---|---|
| PostHog | Product analytics, only after you accept. Receives page views, feature use, the type and position of elements clicked, and the website and campaign tags you arrived from, tied to a random identifier and, once you sign in, your account identifier, plan and role. It uses your IP address only to work out your country, and does not store it. | PostHog's EU Cloud, in the European Union. Requests go through our own domain to PostHog's EU servers. |
| Cloudflare | Turnstile bot protection on the sign-in and sign-up forms. Receives your IP address and browser information for the check. | Cloudflare's global network, which may process data in countries outside the EU and Qatar under appropriate safeguards. |
Our payment pages are hosted by our payment provider on its own domain. Any cookies set there are covered by its cookie policy, not this one. We do not share analytics information with advertisers, and we do not use Google Analytics, Meta Pixel or similar tags.
Legal basis
We are registered in the Qatar Financial Centre and follow the QFC Data Protection Regulations and the QFC Data Protection Office's guidance, which expects only strictly necessary cookies to be on by default and other cookies to be switched on by the visitor's active choice. Where they apply, we also follow the EU ePrivacy Directive, the UK Privacy and Electronic Communications Regulations and data protection laws such as the GDPR.
Strictly necessary cookies and storage do not need consent, because they are needed to provide the service you asked for. They are listed above so you know what is set.
Analytics runs only on your consent. The PostHog SDK starts switched off and collects and sends no analytics until you click Accept; apart from a record of your choice, it stores nothing on your device. Rejecting has no effect on your use of the site, and you can use Faive without accepting.
Your choices
Change your cookie settings. Use the "Cookie settings" link in the footer of our website or the sidebar in the app, or the "Change cookie settings" button at the bottom of this page. It withdraws your current analytics answer, resets the PostHog identifier on your device, and shows the banner again so you can choose afresh. Changing your mind is as quick as accepting was.
Browser controls. You can block or delete cookies, local storage and session storage in your browser settings. Deleting the strictly necessary items signs you out and shows the banner again. Instructions for common browsers: Chrome, Firefox, Safari, Edge.
Browser privacy signals. Our website does not currently respond to Do Not Track, Global Privacy Control or similar browser signals. Analytics stays off unless you accept it in our cookie banner.
Record of your consent. When you answer the banner, we store your choice, the time and the version of the banner wording on your device. We also keep a record on our servers of your answer, the banner version and the time, linked to your account if you are signed in or to a random identifier if not. It does not include your email or IP address. This lets us show what you agreed to and when. If the banner wording changes in a way that matters, we ask you again.
Changes to this policy
We review this policy against what the site actually stores at least every six months, and whenever we add or remove a tool. The "Last updated" date at the top changes with every update. If we make a material change to what we collect or why, we show the banner again so you can choose again.
Contact
Questions about cookies or this policy: hello@faive.studio
PRONTO LLC (operating Faive)2nd Floor, Scale 7 Office(M7 Building JK1 in Phase 1)Msheireb Downtown - P08Qatar