Cookie & Storage Notice — Clearune
- Effective: 15 July 2026
- Last updated: 19 July 2026
- Review status: Technical/legal draft — obtain qualified human review before the next production publication
- Provider: Joanna Szamota Blackgrain Workshop
- Tax ID (NIP): 5291840195
- REGON: 521704456
1. What this notice covers
This notice explains cookies, local storage, and session storage used by Clearune. Cookies are small values a site sends to a browser. Local and session storage are browser features that keep settings or session data on your device. Polish electronic-communications law applies to both storing information and reading information already stored on a device.
We do not use social-media pixels. Google Analytics loads only after you choose Allow product analytics and is described in Section 5. Google AdSense may use advertising storage on the public website as described in Section 6. Advertising code is not loaded in the private journal or other private product screens.
AI-provider requests are made server to server only after you request an AI feature or opt in to automatic meaningful reflections and save an eligible entry. They do not set OpenAI or Google Cloud AI cookies in your browser. The automatic-reflection preference and opt-in evidence are stored with your account in our database, not in an AI-provider cookie. Google authentication and Google AdSense are separate services and are described below.
2. Your choice
Essential storage is used without consent only where necessary to provide a feature you request, secure the Service, keep you signed in, or remember a privacy choice. Optional product analytics is off by default.
The Clearune first-layer banner offers equally available choices: Use essential only and Allow product analytics. Closing the banner before making a choice selects essential only. You can reopen those controls at any time with Cookie preferences in the footer. Refusing analytics does not reduce journal features. Advertising choices are separate: where required, Google’s certified consent-management platform presents them on an eligible public page before advertising storage or personalisation is used.
We remember the decision for up to six months, then ask again. We also ask again if the analytics purpose changes materially.
3. Essential browser storage
| Name or category | Technology | Purpose | Typical duration |
|---|---|---|---|
__session, __client, and related Clerk values | Essential first-party cookies | Authenticate the account, maintain and refresh the session, prevent session fixation, and protect signed-in routes | Short-lived session tokens are refreshed while the session is active; removed or invalidated at sign-out, revocation, or expiry |
ljk_mk | Session storage | Hold the unlocked journal key for the current browser session so pages can decrypt your journal | Current browser tab/session; cleared at sign-out or session end |
lj_consent | Local storage | Record analytics allowed/essential only, notice version, and decision time | Up to 6 months |
lj_lang | Local storage | Remember English or Polish | Until changed or browser storage is cleared |
| Journal interface preferences | Local storage | Remember sound, dream mode, journal voice, prompt visibility, automatic-reflection interface state, weather on/off, onboarding and voice notices | Until changed, no longer needed, or browser storage is cleared |
lj_opened | Session storage | Avoid replaying an opening effect repeatedly in one session | Current browser tab/session |
lj_ref | Local storage | Attribute an invite link followed by the visitor so a referral can be honoured at signup | Until signup/attribution, removal, or browser storage clearing |
The exact Clerk cookie set may vary with browser and session configuration. Clerk authentication cookies are required for sign-in and security and are not used by Clearune to follow you across unrelated websites. Preference names may change when a feature changes, but they are not used for cross-site tracking.
4. Optional Google, Apple, and Facebook sign-in
When you choose Google, Apple, or Facebook sign-in, your browser is directed to the selected provider. The provider may use its own cookies or browser information to display an account chooser, prevent fraud, complete authentication, and respect the provider account's existing session. Clerk receives the signed identity result and creates the Clearune account session. We do not use these provider technologies for advertising or product analytics.
You can avoid these provider technologies by using email and password instead.
5. Optional product analytics
If you choose Allow product analytics, the app may send page views and permitted product events to Google Analytics and may also send the permitted product events to our own API. Events include actions such as signup, first journal entry, paywall display, upgrade click, personality change, and referral-link copy. A Google Analytics event may contain the page URL and title, timestamp, event name, limited event properties, approximate location derived from the network request, and browser/device information. Our first-party copy may additionally be associated with your account ID when you are signed in.
Analytics never contains journal text, prompts, AI replies, attachment contents, email, name, or a Clearune account identifier sent to Google. We configure Google Analytics with advertising storage and signals disabled. Google may set or read analytics identifiers after consent and acts as our analytics provider under its applicable data-processing terms. We store our first-party event copy in Supabase for up to 13 months; Google Analytics retention follows the property configuration and will not exceed 14 months for user-level event data.
The lj_consent choice in local storage is checked before Google Analytics is loaded or any optional event is sent. Withdrawing consent stops further optional measurement on the next page load; browser controls can remove existing Google Analytics storage.
6. Google AdSense on the public website
The public website may load Google AdSense for signed-out visitors and signed-in Free-plan users. Active Plus, Premium, and Patron subscribers are excluded after the app checks their Stripe-synchronised plan. AdSense is not loaded on private journal, archive, authentication, account, or legal-document screens.
Google may use cookies, local storage, or similar identifiers for consent records, fraud prevention, ad delivery, frequency capping, personalisation where permitted, and aggregated reporting. Exact names and durations may vary by region, browser, Google configuration, and consent choice. Google may also process the public page URL, IP address, device/browser data, consent signals, and ad impressions or interactions. Clearune does not supply journal text or a Clearune account identifier to AdSense.
For users in the EEA, UK, and Switzerland, Google’s certified CMP provides the advertising notice and choices. Refusing advertising consent does not reduce journal features, although Google may show limited ads where legally and contractually permitted. You can revisit advertising choices through Google’s privacy-options control on an eligible public page. Upgrading to an active paid plan prevents the AdSense script from loading for that signed-in account.
7. Cloudflare Turnstile contact protection
The public contact email is protected from harvesting bots. Cloudflare Turnstile loads only after you ask to reveal that address. Cloudflare then processes technical browser, device, network, and challenge information needed to distinguish a person from automated abuse and may use short-lived cookies or browser storage for that security purpose. The token is verified on our server and is single-use.
Turnstile is not used for advertising or product analytics. If it cannot run because of accessibility, browser, or network restrictions, you can contact us by post at the address below.
8. Browser and device controls
You can delete or block cookies and site storage in browser settings. Doing so may sign you out, lock the current journal session, reset preferences, or make requested features unavailable. Clearing lj_consent causes the banner to return; until you choose again, optional analytics stays off.
Location, microphone, and notification permissions are controlled separately in your browser or operating system and can be withdrawn there.
9. Changes and contact
We will update this notice if the storage technologies or purposes change. A new optional purpose will not be enabled without the consent required by law.
Questions or accessibility requests:
Joanna Szamota Blackgrain Workshop · NIP 5291840195 · REGON 521704456
Zachodnia 24, 05-822 Milanówek, Mazowieckie, Poland