Cookies

We use only the cookies needed to keep you signed in. No advertising or tracking cookies.

Beta terms. We will tell you before they change.

Last updated 28 October 2026

The short version

We use only the cookies the service needs to work: to keep you signed in and to keep the service secure. We use no advertising, analytics or cross-site tracking cookies. These essential cookies do not need your consent, so instead of a consent banner we show a one-time note that links here.

Cookies

Names starting with __Host- can only be set over a secure connection by the exact site that uses them, and none of our cookies can be read by scripts on the page (HttpOnly).

Cookies used by AICodingRound
Name	What it does	How long	Set by
`__Host-acr_s`	Keeps you signed in to the app.	Up to 30 days; ends after 7 days without use or when you sign out	Us
`__Host-acr_admin`	Keeps staff signed in to the admin site. Never set for other users.	Up to 8 hours; ends after 30 minutes without use	Us
`__Host-acr_pre`	Protects the sign-in, sign-up and application forms against forged requests before you are signed in.	24 hours	Us
`__Host-acr_oauth`	Ties a GitHub or Google sign-in back to the browser that started it.	10 minutes	Us
`acr_pt`	Opens the live preview of your own workspace. Set only on that preview's address.	Until you close the browser	Us
`acr_ide`	Opens the code editor of your own workspace when you use your own AI subscription in the editor view (switched off during the beta). Set only on that editor's address.	Until you close the browser	Us
`__cf_bmcf_clearance`	Tell people from bots, so attacks and spam are blocked. Not used to track you across sites.	About 30 minutes (cf_clearance only after a security check)	Our network and security provider

Storage in your browser

Some interface choices are kept in your browser's own storage. They are never sent to us and you can clear them at any time in your browser settings.

Browser storage used by AICodingRound
Name	What it does	How long	Where
`acr.aiSourceacr.agent.*`	Your AI choice and assistant settings (mode, model, effort).	Until you clear site data	Local storage
`acr.rightPanelWidth.acr.aiTerminalHint.`	Panel width and hints you dismissed in the workspace.	Until you clear site data	Local storage
`acr.db.draft.acr.db.history.`	Your unsent query and recent queries in a workspace's Database tab.	Until you clear site data	Local storage
`acr_handle_prompt_done`	Remembers that you dismissed the 'pick a handle' prompt.	Until you clear site data	Local storage
`acr_refacr_profile_synced`	The invite link you arrived from, and whether your profile was loaded in this tab.	Until you close the tab	Session storage

Analytics

We count visits to our public pages with our own cookie-free counter: per day, the page and the website you came from (domain only), plus the campaign labels in the link if it had any. We do not store your IP address, a cookie or any identifier, we do not count browsers that send Do Not Track or Global Privacy Control, and we do not load third-party analytics. If that ever changes we will update this page and ask first where the law requires it.

Bot protection on forms

The sign-up, beta application and password-reset forms use our network and security provider’s bot check instead of a puzzle CAPTCHA. It runs in a small frame from that provider and looks at technical signals from your browser to tell people from bots; when we check the result we also send it your IP address. The provider processes this data under its own privacy policy and does not use it for advertising.

Third-party cookies

Apart from our network and security provider’s security cookies above, our pages load no third-party cookies. That provider carries all traffic to our site, so it sees your IP address; no other third-party content network does, because our fonts and the workspace code editor are served from our own domain.

The live preview shows the practice app running in your own workspace. That app may set its own cookies or storage on the preview address, which is unique to your workspace. They belong to the practice app, we do not use them, and you can clear them in your browser.

Control

You can block or delete cookies in your browser settings. Blocking the session cookie means you cannot stay signed in; blocking our network and security provider’s cookies may mean you are asked to prove you are human more often.