Cookie Policy
Last updated September 27, 2026 · Version 1.2
Effective date: September 27, 2026
This Cookie Policy explains how LeonAI LTD ("LeonAI," "we," "us") uses cookies and similar technologies on leonai.io (marketing site), links.leonai.io (customer dashboard), and our shared short-link domain, currently short.leonai.io (short-link and QR redirects). It supplements our Privacy Policy. Contact: care@leonai.io.
1. What Cookies and Similar Technologies Are
Cookies are small text files placed on your device by a website. We also use similar technologies: localStorage and sessionStorage (browser storage read by our own scripts, e.g., to remember your dashboard theme), and pixels or scripts that may set or read cookies. In this Policy, "cookies" includes all of these unless stated otherwise. Cookies may be "session" (deleted when you close your browser) or "persistent" (remain until expiry or deletion), and "first-party" (set by us) or "third-party" (set by another domain).
2. No Non-Essential Cookies on Redirects
Redirect endpoints on the shared short-link domain set no non-essential cookies. When you click a short link or scan a QR code, the redirect is performed with cookieless, server-side click tracking: the click event (timestamp, truncated IP-derived coarse location, device type, browser, operating system, referrer, UTM parameters) is captured on our servers without placing any advertising, analytics, or profiling cookie on your device, and without building any cross-site profile of you. The only cookies that could ever appear on the shared short-link domain are strictly necessary ones (for example, when a password-protected link requires a short-lived session token to validate the password you enter).
3. Categories of Cookies We Use
3.1 Strictly Necessary
These are required for the Service to function and cannot be switched off. They are set without consent under our legitimate interest in operating a secure service.
| Name | Provider | Purpose | Duration |
|---|---|---|---|
la_session | LeonAI (first-party) | Authenticates your dashboard session (JWT reference) | 7 days |
la_csrf | LeonAI (first-party) | Protects forms and state-changing requests against cross-site request forgery | Session |
la_consent | LeonAI (first-party) | Stores your cookie-consent choices (the consent preference cookie itself) | 12 months |
3.2 Functional / Preferences
Remember choices you make. Set only with your consent (or, for localStorage theme settings in the authenticated dashboard, as part of the service you request).
| Name | Provider | Purpose | Duration |
|---|---|---|---|
la_theme (localStorage) | LeonAI (first-party) | Dark/light mode preference | Persistent until cleared |
la_locale | LeonAI (first-party) | Language/region preference | 12 months |
3.3 Analytics
First-party product analytics that help us understand how the marketing site and dashboard are used (pages visited, features used). In the EU/UK these are set only after you opt in via the consent banner. We do not use analytics cookies to track you across other websites.
The partner-attribution cookie below (leonai_via) is set only after you opt in to Analytics, and only when you arrive through a partner link.
| Name | Provider | Purpose | Duration |
|---|---|---|---|
la_analytics | LeonAI (first-party) | Assigns a random identifier to measure visits and feature usage on leonai.io | 13 months |
la_analytics_session | LeonAI (first-party) | Groups page views into a single visit | 30 minutes |
leonai_via | LeonAI (first-party) | Credits the LeonAI partner whose link you followed: a random click id, set on leonai.io and its subdomains, deleted once your sign-up is recorded. Your sign-in email is then shared with LeonAI's partner ledger (on Cloudflare) | 90 days |
3.4 Marketing
Used only on the marketing pages of leonai.io, and only with your consent, to measure campaign effectiveness. No marketing cookies are used in the dashboard or on shared short-link redirect pages.
| Name | Provider | Purpose | Duration |
|---|---|---|---|
la_campaign | LeonAI (first-party) | Attributes signups to the marketing campaign that referred you (UTM capture) | 90 days |
| [Third-party marketing cookies, if any are introduced, will be listed here before use] | — | — | — |
4. Consent Model
Where consent is required (EEA, UK, and similar jurisdictions):
- The consent banner is shown before any non-essential cookie is set. No analytics or marketing script loads until you make a choice.
- The banner offers granular toggles per category (functional, analytics, marketing) and a "Reject All" option with equal prominence to "Accept All."
- Your choice is stored in the
la_consentcookie and logged in ourconsent_recordssystem for 5 years, including the timestamp and the choices made, so we can demonstrate compliance. - Declining non-essential cookies never degrades core functionality: you can create links, view analytics, and manage your account fully.
5. Withdrawing or Changing Consent
You can change or withdraw your consent at any time, as easily as you gave it:
- Click the persistent "Cookie Settings" link in the footer of every page on leonai.io to reopen the preference center.
- Use your browser controls to block or delete cookies (see your browser's help pages for Chrome, Firefox, Safari, or Edge). Note that deleting the
la_consentcookie will cause the banner to reappear. - Clear localStorage via your browser's site-data settings to remove stored preferences such as theme.
Withdrawal applies going forward; it does not affect processing that occurred while consent was in place.
6. Global Privacy Control (GPC)
We treat a valid Global Privacy Control signal sent by your browser as an opt-out of analytics and marketing cookies for that browser, automatically and without further action from you. This also serves as an opt-out of "sale or sharing" under California law (see the Privacy Policy, Section 12).
7. Consequences of Disabling Cookies
If you block strictly necessary cookies, you will not be able to log in to the dashboard, and password-protected links may not function. Disabling functional cookies means preferences such as dark mode or language reset each visit. Disabling analytics or marketing cookies has no effect on your ability to use the Service; we simply receive less aggregate information about how our sites are used. Clicking short links on the shared short-link domain is unaffected by any cookie choice, since redirects do not depend on non-essential cookies.
8. Changes to This Policy
We may update this Cookie Policy when we add, remove, or change cookies. The tables above are reviewed regularly. Material changes (for example, introducing a new third-party marketing cookie) will be reflected in the consent banner, which will re-prompt for consent where required. The "Effective date" above indicates the latest revision.
9. Contact
Questions about this Cookie Policy or our use of cookies: care@leonai.io, or write to LeonAI LTD, Avraham Pachornik 17, Ness Ziona, Israel. For more on how we handle personal data generally, including your rights, see our Privacy Policy at links.leonai.io/legal/privacy.