Cookies
Last updated: 5 May 2026
This page explains the cookies and similar technologies that AI Identity Organization sets when you visit aiidentity.org. It complements our privacy notice.
How we treat cookies
We use Google's Consent Mode v2. This means that until you tell us otherwise, all non-essential cookies (analytics and advertising) are denied by default. Tags loaded by Google Tag Manager observe this signal and do not store identifiers in your browser.
Visitors in the UK, the EEA and Switzerland are shown a banner the first time they visit and nothing non-essential is set until they accept. Visitors elsewhere see the same banner and can opt out at any time.
Change your choice
Your choice is remembered for 12 months in a small first-party cookie (aii_consent). To make a different choice you can click the button above, or delete site cookies in your browser and reload — the banner will appear again.
Cookies we use
Strictly necessary
These are required for the site to work and are not subject to consent.
| Name | Purpose | Lifetime |
|---|---|---|
sb-* | Authentication session (set by our database & auth processor when you sign in). | Session / up to 1 year |
aii_geo | Two-letter country code from the edge so the consent banner can show the right default. Needed for the consent flow itself. | 24 hours |
aii_consent | Stores your cookie choice so we don't ask again every visit. | 12 months |
Functionality (only if granted)
| Name | Purpose | Lifetime |
|---|---|---|
aii_ref | Affiliate attribution. Set when you arrive via a ?ref= link so the partner gets credit if you sign up. | 90 days |
aii_ref_visitor | Anonymous visitor identifier paired with the affiliate code, used to de-duplicate clicks. | 90 days |
Analytics (only if granted)
Loaded by Google Tag Manager and Google Analytics 4 if you grant the analytics category. Used to understand which pages help and which don't.
| Name | Purpose | Lifetime |
|---|---|---|
_ga | Distinguishes unique visitors. | 2 years |
_ga_<container> | Persists session state for Google Analytics 4. | 2 years |
_gid | Distinguishes users (legacy). | 24 hours |
_gat | Throttles request rate. | 1 minute |
Advertising (only if granted)
We do not currently run ad campaigns. If we do in the future, this category would govern conversion and audience cookies set by Google Ads, Meta, LinkedIn, or similar — and only if you grant the advertising category.
Third-party cookies
We do not embed third-party tracking pixels outside the consent flow described above. Embedded videos, social widgets and similar may set their own cookies if we add them in future — those would also fall under the analytics/advertising categories you control.
Global Privacy Control
If your browser advertises Global Privacy Control (Sec-GPC / navigator.globalPrivacyControl === true) we treat it as a binding Reject from the very first request — the consent banner is not shown, no analytics or advertising cookies are set, and the choice is recorded so we don't ask again. You can still override this on a per-site basis by opening and granting a category manually.
Browsers that send the older Do-Not-Track header without GPC are not treated as a binding signal (the standard was withdrawn) but the consent banner of course still respects whatever you choose.
Changes to this notice
We update this notice when we change which cookies we set. Material changes will also bump the consent record version, which causes the banner to ask again.
Operated independently by AI Identity Organization. Questions: /contact.