QuestionCraft™ Cookie Policy

Last Updated: 12/06/2025 Effective Date: 12/06/2025

Introduction

This Cookie Policy explains how QuestionCraft LLC ("QuestionCraft™," "we," "us," or "our") uses cookies and similar tracking technologies when you visit https://questioncraft.ai (the "Service," "Platform," "Website").

By using QuestionCraft™, you consent to the use of cookies as described in this Cookie Policy.

This Cookie Policy should be read together with our Privacy Policy and Terms of Service.

1. What Are Cookies?

1.1 Definition

Cookies are small text files that are stored on your device (computer, smartphone, tablet) when you visit websites. They help websites remember your preferences, authenticate your sessions, and track how you use the site.

1.2 How Cookies Work

When you visit QuestionCraft:

Our server sends cookies to your browser
Your browser stores the cookies on your device
Your browser sends cookies back to our server on subsequent visits
This allows us to recognize you and remember your preferences

1.3 Types of Cookies by Duration

Session Cookies:

Temporary cookies that expire when you close your browser
Used for authentication and session management
Deleted automatically when you end your browsing session

Persistent Cookies:

Remain on your device for a set period (days, months, or years)
Used to remember preferences and settings across sessions
Stay on your device until they expire or you delete them manually

2. Cookies We Use

2.1 Essential Cookies (Always Active)

These cookies are necessary for QuestionCraft to function and cannot be disabled without breaking core functionality.

Authentication & Session Management:

Cookie Name: qc_session
Purpose: Keeps you logged in as you navigate the platform
Duration: Session (deleted when you close browser)
Provider: QuestionCraft
Cookie Name: qc_auth_token
Purpose: Securely authenticates your account
Duration: 30 days (or until logout)
Provider: QuestionCraft

Security:

Cookie Name: qc_csrf_token
Purpose: Protects against Cross-Site Request Forgery (CSRF) attacks
Duration: Session
Provider: QuestionCraft

Load Balancing:

Cookie Name: qc_lb
Purpose: Distributes traffic across servers for optimal performance
Duration: Session
Provider: QuestionCraft / Vercel

Why These Are Essential:

You cannot log in or use QuestionCraft without authentication cookies
Security cookies protect your account from attacks
Session cookies maintain your state as you use the platform
Load balancing ensures fast, reliable service

These cookies do NOT track you across websites and contain NO personal information beyond what's necessary for functionality.

2.2 Functional Cookies (Optional - Can Be Disabled)

These cookies enhance your experience by remembering your preferences and settings.

Preferences:

Cookie Name: qc_theme
Purpose: Remembers your theme preference (light/dark mode)
Duration: 1 year
Provider: QuestionCraft
Cookie Name: qc_language
Purpose: Remembers your language preference
Duration: 1 year
Provider: QuestionCraft
Cookie Name: qc_dashboard_layout
Purpose: Remembers your dashboard customization
Duration: 1 year
Provider: QuestionCraft

Settings:

Cookie Name: qc_ai_prefs
Purpose: Remembers your preferred AI models (for Master tier)
Duration: 6 months
Provider: QuestionCraft

Impact of Disabling:

Your preferences will reset each session
You'll need to re-select theme, language, and settings repeatedly
Functionality is not affected, just convenience

2.3 Analytics Cookies (Optional - Can Be Disabled)

These cookies help us understand how users interact with QuestionCraft so we can improve the Service.

Google Analytics:

Cookie Names: _ga, _gid, _gat
Purpose: Track usage patterns, popular features, session duration
Duration: _ga (2 years), _gid (24 hours), _gat (1 minute)
Provider: Google
Data Collected: Pages visited, time on site, device type, approximate location (city-level)
Privacy: Data is anonymized and aggregated
Opt-out: https://tools.google.com/dlpage/gaoptout

Mixpanel:

Cookie Name: mp_* (various)
Purpose: Product analytics to understand feature usage and user journeys
Duration: 1 year
Provider: Mixpanel
Data Collected: Feature clicks, user flows, engagement metrics
Privacy: User IDs are hashed; individual users are not identifiable
Opt-out: Available in account settings

What We Learn:

Which features are most used (and which aren't)
Where users encounter difficulties
How question quality improves over time
Typical user workflows and patterns

What We Do NOT Track:

Your actual questions or AI responses (this is NOT sent to analytics)
Personal information (name, email, payment details)
Activity outside of QuestionCraft
Specific content you create

Impact of Disabling:

Your usage won't contribute to aggregate statistics
We can't personalize recommendations as effectively
No impact on functionality

2.4 Performance Cookies (Optional - Can Be Disabled)

These cookies help us monitor and improve QuestionCraft's performance.

Sentry (Error Tracking):

Cookie Names: sentry-*
Purpose: Detect errors, crashes, and performance issues
Duration: Session
Provider: Sentry
Data Collected: Error messages, stack traces, browser info
Privacy: No personal information; only technical diagnostic data

What This Helps With:

Identifying and fixing bugs quickly
Monitoring uptime and reliability
Improving response times
Ensuring smooth user experience

Impact of Disabling:

We may not detect errors affecting your session
Bug fixes may take longer
No impact on functionality

2.5 Marketing Cookies (Optional - Can Be Disabled)

These cookies help us measure the effectiveness of our marketing efforts. Currently not used; listed for future implementation.

Potential Future Use:

Ad Retargeting: Show QuestionCraft ads to visitors who didn't sign up
Conversion Tracking: Measure which marketing channels drive sign-ups
A/B Testing: Test different messaging and landing pages

If We Implement Marketing Cookies:

We will update this Cookie Policy with 30 days' notice
You will have the option to opt-out
Only used on public marketing pages (not within logged-in platform)

3. Third-Party Cookies

3.1 What Are Third-Party Cookies?

Third-party cookies are set by domains other than QuestionCraft (e.g., analytics services, payment processors).

3.2 Third-Party Services We Use

Payment Processing (Stripe):

Purpose: Secure payment processing for subscriptions
Cookies Set: Various Stripe cookies for fraud prevention
Control: Managed by Stripe; see https://stripe.com/privacy
Required: Yes, for processing payments

Analytics (Google Analytics, Mixpanel):

Purpose: Usage analytics and product insights
Cookies Set: See Section 2.3
Control: Can be disabled in account settings
Required: No

Hosting (Vercel):

Purpose: Application hosting and delivery
Cookies Set: Load balancing and performance cookies
Control: Managed by Vercel; see https://vercel.com/legal/privacy-policy
Required: Yes, for using the Service

3.3 AI Provider Cookies

Important: When you use QuestionCraft, your questions are sent to third-party AI providers (OpenAI, Anthropic, Google, etc.) via their APIs, not through your browser.

This means:

AI providers do NOT set cookies in your browser when you use QuestionCraft
They see our API keys, not your browser cookies or identity
Your QuestionCraft account is not linked to AI provider accounts
AI providers process your questions according to their privacy policies

For direct visits to AI provider websites (outside QuestionCraft), refer to their cookie policies:

OpenAI: https://openai.com/policies/privacy-policy
Anthropic: https://www.anthropic.com/privacy
Google: https://policies.google.com/technologies/cookies

4. Other Tracking Technologies

4.1 Local Storage

What It Is:

Browser storage (like cookies, but can hold more data)
Used to store preferences and cache data locally

How We Use It:

Save draft questions locally (so you don't lose work)
Cache AI model preferences for faster loading
Store dashboard layout and view preferences

Privacy:

Local storage never leaves your device
Cleared when you clear browsing data
Can be viewed/deleted in browser developer tools

4.2 Session Storage

What It Is:

Temporary browser storage that clears when you close the tab

How We Use It:

Temporarily store form data during active sessions
Maintain state during multi-step workflows
Cache API responses to reduce redundant requests

Privacy:

Automatically deleted when you close the browser tab
Never sent to our servers unless explicitly submitted

4.3 Web Beacons / Pixels

What They Are:

Tiny invisible images embedded in web pages or emails
Used to track if content was viewed

How We Use Them:

Measure email open rates (marketing emails only, not transactional)
Track which features are loaded on pages
Monitor user engagement with content

Note: We do NOT currently use tracking pixels, but may in the future for marketing purposes. We will update this policy if implemented.

4.4 JavaScript and Device Fingerprinting

What It Is:

Collecting information about your device and browser configuration
Used to identify devices without cookies

Our Approach:

We collect basic device information (browser type, OS, screen resolution) for analytics
We do NOT engage in invasive fingerprinting techniques
Device data is used only for debugging and improving compatibility

5. How to Manage Cookies

5.1 In QuestionCraft Account Settings

To control optional cookies:

Log in to your QuestionCraft account
Go to Settings → Privacy & Cookies
Toggle cookie categories:
- Analytics Cookies: ON/OFF
- Performance Cookies: ON/OFF
- Functional Cookies: ON/OFF

Note: Essential cookies cannot be disabled (Service won't work without them).

5.2 In Your Browser

All major browsers allow you to manage cookies:

Google Chrome:

Settings → Privacy and security → Cookies and other site data
Options: Allow all, Block third-party, Block all (breaks sites)
See existing cookies: Site Settings → View permissions and data

Mozilla Firefox:

Settings → Privacy & Security → Cookies and Site Data
Options: Standard, Strict, Custom
Manage Data to see/delete specific cookies

Safari:

Preferences → Privacy → Manage Website Data
Options: Block all cookies, Allow from current website only
Remove individual website data

Microsoft Edge:

Settings → Cookies and site permissions → Cookies and site data
Options: Allow all, Block third-party, Block all
See all cookies and site data

5.3 Opt-Out Tools

Google Analytics Opt-Out:

Install browser add-on: https://tools.google.com/dlpage/gaoptout
Prevents Google Analytics on ALL websites

Network Advertising Initiative (NAI):

Opt-out of interest-based advertising: https://optout.networkadvertising.org

Digital Advertising Alliance:

Opt-out of targeted ads: https://optout.aboutads.info

5.4 Mobile Devices

iOS (iPhone/iPad):

Settings → Safari → Privacy & Security
Options: Prevent Cross-Site Tracking, Block All Cookies

Android:

Chrome app → Settings → Site settings → Cookies
Options: Allow cookies, Block third-party, Block all

5.5 Do Not Track (DNT)

What It Is:

Browser setting that signals websites not to track you

Our Approach:

There is no universal standard for how to respond to DNT signals
We provide cookie controls in account settings instead
Essential cookies still function (required for the Service to work)

6. Impact of Blocking Cookies

6.1 Blocking Essential Cookies

If you block essential cookies, you will NOT be able to:

Log in to your account
Stay logged in as you navigate
Use any features requiring authentication
Make payments or manage subscriptions

Recommendation: Allow essential cookies to use QuestionCraft.

6.2 Blocking Functional Cookies

If you block functional cookies:

Your preferences (theme, language) won't be saved between sessions
You'll need to reset settings each time you visit
Dashboard customizations won't persist

Impact: Inconvenient but doesn't break core functionality.

6.3 Blocking Analytics/Performance Cookies

If you block analytics and performance cookies:

Your usage won't contribute to aggregate statistics
We can't detect errors specific to your session
Recommendations may be less personalized

Impact: No functional impact; your privacy is enhanced.

7. Children's Privacy

QuestionCraft is not intended for children under 13 (or 16 in the EU).

We do not knowingly collect cookies or data from children
If we learn a child has used the Service, we delete their data
Parents: Contact us at privacy@questioncraft.ai if you believe your child used QuestionCraft

8. International Users

8.1 EU/EEA Users (GDPR)

Under GDPR, you have the right to:

Know what cookies are used and why
Opt-in to non-essential cookies (we provide controls)
Withdraw consent at any time
Lodge a complaint with your Data Protection Authority

Our Compliance:

Cookie consent banner for EU visitors (where required)
Clear controls in account settings
No cookies set until you consent (except essential)

8.2 California Users (CCPA)

Under CCPA:

You can opt-out of the "sale" of personal information
We do NOT sell cookie data or any personal information
You can disable analytics cookies in account settings

9. Updates to This Cookie Policy

9.1 Changes

We may update this Cookie Policy to reflect:

New cookies or tracking technologies
Changes to third-party services
Legal or regulatory requirements
User feedback and best practices

9.2 Notice

For material changes:

30 days' advance notice via email
Prominent notice on QuestionCraft website
Updated "Last Updated" date at top of policy

For minor changes:

Updated "Last Updated" date
No advance notice required

9.3 Acceptance

Continued use of QuestionCraft after changes constitutes acceptance of the updated Cookie Policy.

10. Questions and Contact

10.1 Cookie Questions

Email: privacy@questioncraft.ai
Subject: "Cookie Policy Question"

10.2 Privacy Concerns

Email: privacy@questioncraft.ai
Subject: "Privacy Inquiry"

10.3 General Support

Email: support@questioncraft.ai
Website: https://questioncraft.ai/support

10.4 Mailing Address

QuestionCraft LLC
Attn: Privacy Department
3 Fruit St Newburyport, MA 01950

11. Summary Table

| Cookie Category | Purpose | Can Be Disabled? | Impact If Disabled | |----------------|---------|------------------|-------------------| | Essential | Authentication, security, core functionality | ❌ No | Service won't work | | Functional | Remember preferences and settings | ✅ Yes | Settings reset each session | | Analytics | Understand usage patterns | ✅ Yes | Less personalized experience | | Performance | Monitor errors and speed | ✅ Yes | Bugs may take longer to fix | | Marketing | Measure campaign effectiveness | ✅ Yes (not currently used) | No impact |

12. Related Documents

Privacy Policy: https://questioncraft.ai/privacy
Terms of Service: https://questioncraft.ai/terms
Acceptable Use Policy: https://questioncraft.ai/acceptable-use
Security Practices: https://questioncraft.ai/security

13. Acknowledgment

BY USING QUESTIONCRAFT, YOU ACKNOWLEDGE THAT YOU HAVE READ AND UNDERSTOOD THIS COOKIE POLICY AND CONSENT TO THE USE OF COOKIES AS DESCRIBED.

You can withdraw consent or modify cookie preferences at any time in your account settings.

END OF COOKIE POLICY