Cookie Notice

Essential authentication cookies

After Google sign-in, Logo Pop sets a secure, first-party Better Auth session cookie so the service can recognize your account. The session lasts up to 30 days and may renew when you actively use the service. Signing out revokes the server session.

During Google sign-in, a short-lived state cookie is used to prevent forged login requests and complete the OAuth flow. It expires after approximately five minutes. These cookies are strictly necessary for account access and security.

Local browser storage

Logo Pop may use IndexedDB to preserve an unfinished brief and selected reference files while you leave for Google sign-in. This draft expires after one hour and is not uploaded merely because it was saved locally. Local storage also remembers interface choices such as whether live generation is enabled on that device.

Returning-user preference

After a successful sign-in, local storage remembers that this browser has signed in before so we can display the returning-user sign-in message. This flag contains no account identifier or credit balance and remains until you clear the site's browser data. It does not determine eligibility for signup credits, which is checked on the server.

Signup protection cookie

When you open sign-in, we use a signed, first-party cookie containing a random browser identifier to check new-account credit eligibility and prevent repeated claims from the same browser. It lasts up to one year and is not accessible to page scripts. On HTTPS it is named __Host-logopop_did. It is not an advertising identifier or a hardware fingerprint. Disabling this cookie does not prevent sign-in, but the signup credit cannot be issued without a valid browser eligibility check.

Browser verification

When human verification is enabled, Cloudflare Turnstile checks browser requests. After a successful check, a signed, first-party cookie named __Host-logopop_human on HTTPS remembers verification for up to 1 hour, so each generation does not require a separate challenge. It is inaccessible to page scripts and bound to the current network using a keyed hash. Clearing cookies, expiration, or changing networks may require another check. This cookie does not replace sign-in or grant credits.

Cloudflare and third parties

Logo Pop runs on Cloudflare, which may process network identifiers and use security or load-balancing technologies needed to deliver and protect the site. Google may set its own cookies when you choose Google sign-in; those cookies are controlled by Google and governed by its policies.

No advertising cookies

Logo Pop does not intentionally set advertising, cross-site tracking, or behavioral analytics cookies. If that changes, this notice and any required consent controls will be updated before non-essential cookies are used.

Your controls

You can delete or block cookies in your browser. Blocking essential authentication cookies will prevent sign-in and account features from working. Questions can be sent to logopop.support@gmail.com.