Cookie policy

Last updated: October 13, 2026.

Essential cookies

Secure session cookies keep you signed in and prevent account access from being stored in browser JavaScript. The analytics-consent cookie remembers whether you allowed optional measurement. These cookies are required for the choices or service you request.

Temporary browser storage

When you start sign-in, we can keep open forms’ text, settings, and already-uploaded media references in session or local browser storage for up to 30 minutes. This lets the same browser restore your work after sign-in, including an email link opened in another tab, or when you return without signing in. These drafts are removed when restored; expired drafts are removed by the open page or on a later visit. Raw files selected from your device are not copied into this sign-in storage.

Essential first-party counts

We count page visits and generate-button clicks with a random identifier stored in this browser so we can measure unique visitors and whether the core tool is being attempted. These limited records can include the page path and signed-in account identifier, but not prompt text, uploaded content, or generation settings. They stay on our service and do not load Google Analytics or Microsoft Clarity.

To diagnose checkout failures, we also record limited first-party operational events whether or not optional analytics is allowed. These use a new random reference for each checkout attempt and may include the checkout stage, payment provider, plan, quantity, elapsed time, status code, country and a fixed page category. They do not include an account or visitor identifier, email, IP address, page query, prompt, payment details or raw error text. The checkout reference is not stored in cookies or browser storage, and these events are not sent to Google Analytics, Clarity or advertising services.

Optional analytics

Hotel Lobby stores validated ad click identifiers and campaign labels in a first-party cookie for up to 90 days. Confirmed new registrations can also be reported to Google Ads as a secondary measurement with zero revenue. Private uploads, photos, generation results and account pages never load Google Analytics or Clarity; server-side conversion reporting is separate from browser analytics.

Separately from browser cookies, our server reports first purchases to Google Ads with the ad click identifier (if any) and a SHA-256 hash of your account email. In the EEA, UK and Switzerland this happens only after “Allow analytics”; elsewhere it applies unless you choose “Essential only”. Details are in the privacy policy.

Your current choice

Analytics preference: not selected.

Ad conversion measurement: not selected.

You can change your choice here at any time. “Essential only” withdraws analytics and ad conversion measurement, including server-side purchase reporting, together. It does not remove your sign-in session.

Browser controls

You can also remove cookies through browser settings. Removing the secure session cookie signs you out. Blocking essential cookies may prevent account and billing features from working.

For data-handling details and your rights, read the privacy policy.

Welcome-credit abuse prevention

To prevent repeated welcome-credit claims, an essential first-party browser cookie lasts up to one year. Our server stores a hashed random browser identifier to limit the welcome offer to once per browser per site. This does not use Google Analytics, track you across sites, or change existing balances or daily check-in rewards. Shared-browser users can still register and use their accounts; contact support if you believe an offer was withheld in error.