Legal
Cookie Policy
Effective date: September 3, 2026
1. What Are Cookies?
Cookies are small text files placed on your device by a website. They are widely used to make websites work, or work more efficiently. LLM Metrix, Inc. (“LLM Metrix”, “we”, “us”) also uses similar technologies such as localStorage on llmmetrix.com and our web application. This page is an inventory of what we actually write, not a generic cookie taxonomy.
2. What we set
Two HTTP cookies, plus a handful of localStorage keys. We do not set a CSRF-protection cookie: sign-in cookies use SameSite=Lax, which is what stops a cross-site form post from carrying your session.
| Name | Stored as | Purpose | Consent |
|---|---|---|---|
| sb-*-auth-token | HTTP cookie | Supabase session. Keeps you signed in. Sometimes split into numbered chunks. Lasts for the life of the session. | Strictly necessary |
| llmmetrix_tr | HTTP cookie | HMAC-signed marker that this browser already used its one anonymous run of the free tools. HttpOnly, SameSite=Lax, Path=/, up to 365 days. It never grants a new run; the server ledger is authoritative. | Strictly necessary |
| llmmetrix-cookie-consent | localStorage | Your Accept or Decline choice, so the banner does not reappear every visit. | The decision itself |
| llmmetrix-ui | localStorage | The project and workspace you last selected in the dashboard. No scan data. | Functional |
| llmmetrix-onboarding | localStorage | In-progress signup wizard fields so email confirmation can resume in a new tab. Never a password. | Functional |
| llmmetrix-tool-session | localStorage | Anonymous id that stitches free-tool funnel steps (view, run, lead) in this browser. Not sent to a third party. | Only after Accept |
3. Third-party cookies
- Supabase: the session cookies in the table above, on our domain.
- Vercel Analytics: loaded only after you Accept, and only in production. It measures page views. We do not load it if you Decline or have not chosen yet.
- Stripe: when you open Checkout or the customer portal, Stripe may set cookies on its own domain. We do not set Stripe cookies on llmmetrix.com.
We do not use advertising or targeting cookies, and we do not sell your data to third-party advertisers.
4. What Decline does
The banner at the bottom of the site is the control. Accept loads analytics; Decline does not. We do not read a browser “Do Not Track” signal.
If you Decline (or later switch a previous Accept to Decline):
- Vercel Analytics is not loaded.
llmmetrix-tool-sessionis not written. If one already existed from a previous Accept, it is deleted.- Sign-in cookies and
llmmetrix_trare still set: they are strictly necessary. The dashboard, signup, and free-tool rate limit keep working.
Most browsers also let you refuse or delete cookies. Blocking all cookies, including strictly necessary ones, will break signing in. Clearing site data removes the localStorage keys in the table.
5. How long they last
Supabase session cookies last for the life of the session. llmmetrix_tr lasts up to 365 days. localStorage keys last until you clear site data for this origin, except llmmetrix-tool-session, which we also delete when you Decline.
6. Changes to This Policy
We may update this Cookie Policy from time to time. When we do, we will update the effective date at the top of this page. Continued use of our services after any change constitutes acceptance of the updated policy.
7. Contact
For questions about this policy, email us at privacy@llmmetrix.com.