Cookie Policy

1What cookies are

A cookie is a small text file a site stores in your browser and reads back on your next request. Related technologies — local storage and session storage — do much the same thing without being sent with every request.

This policy covers both, and should be read together with the Privacy Policy.

2How we use them

We use cookies for four things: keeping you signed in, remembering a preference you chose, and — only if you accept — measuring how the library is used and remembering which affiliate link brought you here. There is no advertising network, no cross-site tracking pixel and no profile built from your browsing.

Analytics and referral cookies are off until you accept them in the banner, and you can change your mind at any time through “Cookie settings” in the footer. Everything else on this page is either strictly necessary or a preference you actively set, so it needs no consent.

3Strictly necessary cookies

These are required for the site to work. Without them you cannot sign in or complete a purchase.

• templify_session — keeps you signed in. It holds a random token, is HTTP-only so scripts cannot read it, is sent only over HTTPS in production, and expires after 30 days or when you sign out.
• templify_visitor — counts the free prompt copies you are allowed each day without an account. It holds a random identifier and nothing else, is HTTP-only, is set only when you copy your first free prompt, and lasts one year. It is not used to build a profile or shared with anyone.
• Security and rate-limiting counters — short-lived records tied to your request, used to block brute-force attempts on sign-in and password reset.

4Preference cookies

These remember a choice you made, so the site comes back the way you left it.

• NEXT_LOCALE — the language you are reading in. Lasts one year.
• LOCALE_MANUAL — records that you picked a language yourself, so we stop guessing from your browser settings. Lasts one year.

5Analytics cookies

We use Google Analytics 4 to count visits and see which templates people look at. It runs in Google’s consent mode: until you accept, it sets no cookies and reports only an anonymous, cookieless hit with no identifier attached to you.

Once you accept, these are set. Decline, or withdraw consent later, and they are not set at all.

• _ga — a randomly generated id that lets Google Analytics tell one browser from another. Lasts two years.
• _ga_51VK5RVDQX — keeps the state of your current visit for our property specifically. Lasts two years.
• Google acts as our processor for this data. We never receive your name or email through it, and it is not used for advertising.

6Affiliate referral cookie

If you arrive through an affiliate's link (one ending in ?ref=…), we can remember that link so the affiliate is credited if you create an account later. We only do this once you accept cookies. Decline, or withdraw consent later, and it is not set, or is removed.

Without it, the link still counts for the visit you arrive on, and you can type an affiliate's code yourself when you sign up.

• templify_ref — the code from the affiliate link you followed, and nothing else. Lasts 30 days, and is cleared when you create an account.

7What we keep in local storage

These stay in your browser and are never sent to our servers.

• theme — whether you chose the light or the dark interface.
• favourites — the templates you marked, so the list survives a reload.
• cookie-consent — whether you accepted or declined optional cookies, so you are asked once. Cleared when you clear site data.

8Third-party cookies

When you go through checkout, Stripe sets its own cookies on its hosted payment page to process the payment and detect fraud. Those cookies are set by Stripe, under Stripe’s privacy policy, and we cannot read them.

If you sign in with Google, Google sets cookies as part of its own sign-in flow, under Google’s privacy policy.

Fonts and the icon set we use are loaded from third-party CDNs. Those requests reach the provider with your IP address and browser headers, as any web request does, but they do not set cookies for us.

9What we do not use

We do not use advertising cookies, retargeting pixels, social media trackers or cross-site identifiers, and we do not sell or share browsing data with data brokers. The analytics above are measurement only — the advertising signals Google supports stay switched off.

10How to control cookies

Every browser lets you see, block and delete cookies, and clear local storage. The controls live under Settings → Privacy in Chrome, Edge, Firefox and Safari.

You can also sign out to clear the session cookie, or switch language and theme to overwrite those preferences.

Blocking strictly necessary cookies will stop you signing in and completing a purchase. The rest can be blocked with no loss beyond the site forgetting your choices.

11Changes to this policy

If we add, remove or change a cookie, we update this page and the date at the top. If a new cookie needs your consent, we will ask before setting it.

12Contact

Questions about cookies go to contact@2brosgroup.com.