loopling.ai

Cookie Policy · loopling

Effective date: June 5, 2026

Atelier — operated by Extensium Inc. — uses a small number of cookies. None of them are for advertising or cross-site tracking. The full list is below.

1. What atelier sets

Functional (always on)

These cookies are required for the app to work. You can't turn them off without making Atelier non-functional. Browsers consent to "strictly necessary" cookies implicitly under most regulations (GDPR, CCPA), so we don't ask you to opt in to these — but the table is here so you know what they are.

Cookie	Purpose	Duration
`atelier_session`	Authenticated session JWT (HttpOnly, Secure, SameSite=Lax). Without it, you're signed out.	30 days, sliding
`atelier_oauth_state`	One-time OAuth CSRF token, set during Google sign-in flow.	10 minutes
`atelier_oauth_pkce`	One-time PKCE verifier, set during Google sign-in flow.	10 minutes
`atelier_oauth_nonce`	One-time OIDC nonce, set during Google sign-in flow.	10 minutes

Analytics

Atelier does not run any third-party analytics service. We do not use Google Analytics, Mixpanel, Segment, Plausible, or any equivalent.

Advertising

Atelier does not serve advertising and does not set advertising cookies.

2. Stripe-set cookies

When you proceed to Stripe Checkout or the Stripe Customer Portal — both hosted on Stripe's own domain — Stripe may set cookies on its domain (*.stripe.com) for fraud detection, session management, and 3-D Secure handling. These cookies are governed by Stripe's cookie policy. Atelier does not control them and cannot read them.

If you never start a checkout or open the billing portal, no Stripe cookies are set.

3. Local storage and IndexedDB

Atelier uses your browser's local storage and IndexedDB to keep your spaces working offline and to sync changes when you reconnect. These aren't technically cookies but the privacy considerations are similar. The data stored is per-origin (only Atelier can read it) and is described in detail in the privacy policy.

You can clear this data from your browser's site-settings menu. Doing so signs you out of Atelier and removes the local copy of your spaces (the server copy stays intact; signing back in re-syncs it).

We don't ask for cookie consent through a banner because:

All cookies Atelier sets are strictly necessary for the service to work (authentication and the OAuth flow). Strictly-necessary cookies are exempt from consent requirements under GDPR and most jurisdictional privacy laws.
We don't run any analytics or advertising cookies that would trigger a consent obligation.
Cookie banners in the wild often double as dark patterns to push users toward "Accept All." Atelier wouldn't gain anything from showing one — there's nothing to opt into.

If a regulator or your jurisdiction requires a banner anyway, please let us know at hello@atelier.space and we'll add a region-specific one.

5. Changes to this policy

If we add or remove cookies in a way that materially changes what the policy describes:

Update the effective date.
Email active users 14 days before the change.
Keep prior versions at https://atelier.space/legal/cookies?version=YYYY-MM-DD.

6. Contact

For questions about this policy, email hello@atelier.space.

Extensium Inc., c/o Legalinc Corporate Services Inc., 131 Continental Dr, Suite 305, Newark, DE 19713, U.S.A.

loopling.ai · grows with you, grows itself

hello@loopling.ai · community · pricing · privacy · terms