Last updated: September 6, 2026
The short version
Nothing optional runs until you say so. AdFrames uses a small number of strictly necessary cookies to sign you in and to remember your cookie choice, plus two optional third parties. Microsoft Clarity loads only after you opt in and only on our public marketing and legal pages; it never runs inside the signed-in product. HubSpot powers our support chat and loads only if you press the Help button — not on page load, anywhere. Neither one is running right now unless you have already chosen it.
Strictly necessary
These deliver a service you have asked for. They cannot be switched off, and under the ePrivacy Directive and the UK PECR they do not require consent.
| Name | Set by | Purpose | Lifetime |
|---|---|---|---|
sb-*-auth-token | AdFrames (first party, via Supabase) | Keeps you signed in and refreshes your session. Only set once you sign in. | Until sign-out or expiry |
af_consent | AdFrames (first party) | Remembers the cookie decision you made, so you are not asked again on every page. Contains your choice and when you made it — nothing that identifies you. | 6 months |
Analytics and session replay — optional, off by default
If you opt in, we load Microsoft Clarity on our public pages. Clarity records behavioural metrics, heatmaps and a replay of your visit: pages viewed, clicks, scrolling, mouse movement, the site that referred you, and device, browser and approximate location derived from your IP address. It sets first- and third-party cookies to do this.
| Name | Set by | Purpose | Lifetime |
|---|---|---|---|
_clck | Microsoft Clarity | Persists a Clarity user id across visits. | 1 year |
_clsk | Microsoft Clarity | Groups the page views of a single visit into one replay. | 1 day |
CLID, MUID, ANONCHK, SM | Microsoft (clarity.ms, c.bing.com) | Microsoft's own identifiers, synchronised across its properties. Microsoft may use these for its own product improvement and advertising. | Up to 1 year |
Microsoft processes this data as an independent controller under the Microsoft Privacy Statement. Clarity is not loaded on sign-in, sign-up or password pages, on invitation links, or anywhere in the signed-in workspace or administrative area — so your catalog data, Meta business assets, ad spend, billing details and generated creative are never captured by it.
Support chat — optional, and only if you ask for it
Our Help button is our own: pressing it is what loads HubSpot, and until you press it no HubSpot code runs and no HubSpot cookie is set. Because a chat is a service you have explicitly asked for, that press is the permission — but HubSpot's script also records the pages you view while it is loaded, so we ask you to confirm before the first one and record the answer alongside your other cookie choices.
| Name | Set by | Purpose | Lifetime |
|---|---|---|---|
hubspotutk | HubSpot | Identifies your browser to HubSpot so a conversation can be picked up where it left off, and links it to your contact record if you gave us an email address. | 6 months |
__hstc, __hssc, __hssrc | HubSpot | HubSpot's own analytics: which site referred you, when this visit started, and whether it is a new session. | 30 minutes to 6 months |
messagesUtk | HubSpot | Recognises you across chat sessions so an open conversation still shows your earlier messages. | 6 months |
HubSpot is a processor acting on our instructions for the content of your messages. Turning support chat off in your privacy choices removes the widget and clears the HubSpot cookies set on this domain; anything HubSpot set on its own domains is outside a script's reach, so clear it through your browser's site data if you want it gone. Reloading the page after switching it off is the only way to be certain nothing already loaded is still running. You can always email support@adframes.app instead and load nothing at all.
Analytics that sets no cookie
We use Vercel Web Analytics to count page views and referrers. It sets no cookie, reads nothing from your device and stores no identifier that could single you out, so it does not require consent — but we disclose it here because you are entitled to know it is running. It is disabled outside our production site.
Global Privacy Control
If your browser or extension sends a Global Privacy Control signal, we treat it as an opt-out: optional analytics stay off, the decision is recorded automatically, and you are not shown a banner asking you to reconsider. You can still override it in your privacy choices if you want to.
Changing your mind
Use — it is linked in the footer of every public page. Withdrawing consent stops Clarity and removes the support chat widget immediately; cookies Microsoft or HubSpot have already set on their own domains are cleared from your browser's site data in the usual way. You can also block cookies or scripts for this site in your browser settings; the rest of the site will keep working, though you will not be able to stay signed in.
Related
Our Privacy Policy explains everything else we collect, and our sub-processor register lists every third party involved. Questions: privacy@adframes.app.
Legal entity: Creative Ground Technologies Private Limited
Registered address: T-Hub Foundation, 1C 831, RAIDURG PANMAKTHA, Madhapur, Hyderabad, Telangana, India 500081