Cookie settings in the footer.2. Cookies we use
On the application (app.mysiren.ai) we use essential storage to keep you signed in. On both mysiren.ai and app.mysiren.ai, the advertising cookies below are set only after you accept the cookie banner.
| Name | Type | Purpose | Duration |
|---|---|---|---|
siren_tokens | Essential · browser localStorage | Keeps your JWT access token and refresh token so you stay signed in across tabs and page reloads. Cleared on logout. | Until logout, or 30 days (refresh-token TTL) |
siren_cookie_consent_v1 | Essential · browser | Remembers whether you accepted or declined the cookie banner. | Until you clear it |
siren_ad_consent | Essential · cookie | Carries your banner choice from mysiren.ai to app.mysiren.ai, so both respect it. | 180 days |
_fbp | Advertising · Meta | Identifies your browser to Meta so we can measure our ads. | 90 days |
_fbc | Advertising · Meta | Records the Meta ad you clicked, if any. | 90 days |
siren_twclid | Advertising · X | Records the X ad you clicked, if any. | 30 days |
siren_in | Essential · browser | Tells mysiren.ai you are signed in on this browser, so it can send you straight to the app. | 30 days |
siren_ref | Functional · browser | Remembers the creator link you arrived from, so that creator is credited if you sign up. | 30 days |
siren_runway_host | Essential · browser | Carries the site you pasted on /try or /launch to the app after you sign in. | 1 day |
siren_launch | Essential · browser | Remembers that you came from the $9.99 launch page, so the app opens on it. | 1 day |
siren_launch_film | Essential · browser | Remembers the video you picked on mysiren.ai/videos, so /launch opens on it. | 1 day |
Because this storage is strictly necessary to deliver a service you've explicitly requested (signing into your workspace), we do not require prior consent under PECR Regulation 6(4) or the equivalent GDPR Recital 32 analysis.
Email pixel tags. Our transactional emails (sent via Resend) may contain a tiny invisible image (a "pixel tag" or "clear GIF") that tells us whether the email was opened. We use this only to measure whether our own service emails reach you — never for cross-site tracking, and the data is not shared with advertisers. Most mail clients let you block remote images, which disables these pixels.
3. Local storage & session storage
As above, the application uses localStorage for the auth-token bundle. This entry is scoped to the app.mysiren.ai origin and is not accessible from other domains. It is not a traditional cookie and is never transmitted with HTTP requests. It's read by our JavaScript code to attach an Authorization header to API calls.
We may, in the future, use sessionStorage for short-lived UI state (e.g. an in-progress onboarding step). Session storage is cleared automatically when you close the tab.
4. Third-party cookies
With your consent, we load the Meta pixel and the X pixel on mysiren.ai and app.mysiren.ai. They report page views and signups (and, for Meta, checkouts started) so we can measure our ads. When you pay, our server also tells Meta about the purchase, using a scrambled (hashed) copy of your email and Meta's cookie ids, so the sale can be matched to the ad you saw. We never send Meta or X your briefs, your content or your card details. Each platform's own privacy policy governs what they do with this data. Without your consent none of this happens. When you send content to a connected platform (X, LinkedIn and so on), that platform's own cookies apply once you go to its site.
Payment flows may place Stripe's own fraud-prevention cookies on the Stripe Checkout domain while you complete a purchase. Those cookies are governed by Stripe's privacy notice.
We do not run analytics cookies today. If we add any, we will update this page first and ask for your consent before they are set.
5. Managing cookies
You can control cookies and similar storage through your browser settings. The major browsers publish up-to-date guides:
Clearing localStorage on the app.mysiren.ai origin will sign you out of Siren immediately. You can also sign out from the dashboard menu, which revokes the refresh token server-side and deletes the local bundle.
To block email pixel tags, configure your mail client not to load remote images automatically (Gmail, Apple Mail, and Outlook all offer this). Blocking images does not affect the delivery of the emails themselves.
To withdraw consent, open "Cookie settings" in the site footer and choose Decline, or clear cookies for mysiren.ai. From then on the Meta pixel and the X pixel stop and no purchase events are sent.
6. Do Not Track
We honour Global Privacy Control (GPC). If your browser sends it, we treat it as declining ad cookies: the Meta pixel and the X pixel do not load and no purchase event is sent to Meta, even if you accepted the banner earlier.
7. Changes
If we add or remove cookies, we update this page. The "last updated" timestamp at the top is authoritative. For any new non-essential cookie, we will ask for consent before it is set.
8. Contact
Questions about cookies or this policy: [email protected]