Legal
Cookie Policy
Every cookie and every kind of browser storage ActVox uses, what each one is for, and how to change your mind.
Effective November 5, 2026 · v2026-11-05.2
How we handle this
Cookies are small files a site stores in your browser. Some are needed for the site to work at all; the rest are optional. We also use your browser's local and session storage, which is not technically a cookie but is still information kept on your device, so it is listed here too.
Analytics starts switched off. Nothing analytics-related runs before you decide — no analytics cookie is written and no request is sent. In the EU, EEA, UK and Switzerland it stays off until you accept. Elsewhere it runs under a visible notice and you can turn it off at any time. If your browser sends a Global Privacy Control signal we treat that as a refusal everywhere, without you having to click anything.
Refusing is one click, on the same layer as accepting. Essential cookies are never affected by your choice — turning analytics off does not sign you out.
Changing your mind
Use the button above on this page, or "Cookie settings" in the footer of this site. Inside the ActVox app, go to Settings → General → Privacy and data.
Your choice is stored separately for each site. actvox.com and os.actvox.com each keep their own record, so a choice made here does not carry over to the app, and vice versa. Set it in both places if you want the same answer in both.
Your choice does not expire on its own. It is kept until you change it, until you clear your browser storage, or until we materially change what we store on your device — in which case you will be asked again.
The categories
Essential — required to sign you in, keep you signed in, decide which consent rules apply to you, and remember the choice you made. These cannot be turned off, because without them there is no working service and no way to honour your preference.
Functional — remembers your language, and, if you arrived through a partner's referral link, which partner referred you so their commission can be credited. Optional.
Analytics — PostHog, which tells us which pages and features are used. It may record a masked replay of a session, in which the text you type into fields is hidden. If you are signed in and have allowed analytics, your account identifier, email address and name are attached so we can tell one person's session from another's. Optional, and off until you allow it.
Marketing and advertising — when you explicitly allow marketing cookies, OpenAI Ads measures public page visits and completed registrations. It uses the cookies listed below and a hashed account identifier to match conversions. This is separate from analytics consent and stays off under Global Privacy Control. Withdrawing consent stops future measurement and removes the Pixel cookies. X Ads measures public page visits and, for visits that came from an X ad, completed registrations, workspace setup and a first plan payment. It uses the cookies listed below and the click identifier from the ad link, and no email address. X Ads also stays off under Global Privacy Control. Withdrawing consent removes the X cookies.
The full list
| Name | Set by | What it does | Category | Where | Kept for |
|---|---|---|---|---|---|
| av_ads_ref | ActVox | Carries an opaque consented ad referral from the marketing site to the app. | Marketing | shared .actvox.com | 30 days after the Pixel referral is copied; removed on withdrawal |
| __oppref | OpenAI Ads | Matches a consented visit to its advertising referral. | Marketing | both (separately on each) | 30 days after the Pixel writes it; removed on withdrawal |
| __obref | OpenAI Ads | Provides a browser reference for consented conversion measurement. | Marketing | both (separately on each) | 365 days after creation; removed on withdrawal |
| av_x_ref | ActVox | Carries the consented X ad click identifier from the marketing site to the app. | Marketing | shared .actvox.com | 30 days after your last visit from an ad link; removed on withdrawal |
| _twclid | X Ads | Lets the X pixel match a consented visit to the X ad that was clicked. | Marketing | shared .actvox.com | 390 days after the X pixel writes it; removed on withdrawal |
| _twpid | X Ads | A browser identifier the X pixel uses to measure consented visits. | Marketing | shared .actvox.com | 390 days after the X pixel writes it; removed on withdrawal |
| _twsid | X Ads | A session identifier the X pixel uses to group consented visits. | Marketing | shared .actvox.com | 390 days after the X pixel writes it; removed on withdrawal |
| av_consent | ActVox | Records the cookie choice you made, so we can honour it and stop asking. | Essential | both (separately on each) | 12 months |
| av_region | ActVox | Which consent rules to apply to you — derived from the country your request arrives from and whether your browser sends a Global Privacy Control signal. | Essential | both (separately on each) | 1 hour |
| av_anon | ActVox | A random identifier with no personal data in it, used only to attach your cookie choice to a record we can show you later if you ask what you consented to. | Essential | os.actvox.com | 12 months |
| av_ref | ActVox | Remembers which partner referred you so their commission can be credited if you subscribe. Set only if you arrive through a referral link. | Functional | both (separately on each) | 60 days |
| NEXT_LOCALE | ActVox | Remembers the language you chose. | Functional | actvox.com | 12 months |
| Clerk session cookies (__session, __client_uat and related) | Clerk | Keeps you signed in and protects the sign-in flow. Without these you cannot use an account. | Essential | os.actvox.com | Session and short-lived tokens, set by Clerk |
| ph_<project>_posthog (a cookie and a localStorage copy) | PostHog | Product analytics: which pages and features are used. PostHog keeps the same value as a cookie and in localStorage. Neither is written until you allow analytics, and turning analytics off removes both. | Analytics | both (separately on each) | 12 months (PostHog default) |
Clerk sets the cookies that keep you signed in; their exact names and lifetimes are set by Clerk, not by us. PostHog's cookie and its localStorage copy are only written once you have allowed analytics, and turning analytics off clears both.
| What | Stored as | Why | Examples |
|---|---|---|---|
| Workspace layout and open tabs | Local storage (kept between visits) | Restores your panel sizes, open tabs and collapsed folders when you come back. | ws-os-tabs:<workspace>, react-resizable-panels:… |
| Per-window view state | Session storage (cleared when the tab closes) | Keeps two browser windows on the same workspace from fighting over which object is selected. | ws-os-view:<workspace>, actvox-workspace-tabs-window-id |
| One-time notices | Local storage (kept between visits) | Remembers that you have already seen a tour, hint or keyboard overlay so it is not shown again. | actvox_welcome_shown, os:hint-seen-v1 |
| Unfinished work and in-flight requests | Session storage (cleared when the tab closes) | Lets a generation or report you started survive a reload instead of being lost. | pendingReport, actvox:content-generation:<workspace> |
| Connection handles | Session storage (cleared when the tab closes) | Holds the short-lived handle for an app-connection consent screen so a reload does not restart it. | actvox-oauth-consent-handle:<id> |
None of the browser storage above is used for analytics, advertising or tracking. It holds the state that makes the application usable — which tabs you had open, how wide your panels were, work you had not finished. It stays on your device and is cleared when you clear your browser's site data.
Measurement that sets nothing on your device
We measure page-loading performance with a cookieless measurement that stores nothing in your browser and does no cross-site tracking, and we capture unhandled application errors so we can fix them. Neither writes a cookie, and because they are how we keep the service working and secure they are not governed by the analytics choice.
Controls in your browser
You can also delete cookies and site data in your browser's settings, and block them entirely. Blocking essential cookies will stop you being able to sign in. Clearing site data erases the record of your cookie choice, so you will be asked again on your next visit.
What we do with the data behind these cookies is described in the Privacy Policy. Questions go to our contact form.