Cookie Policy
Effective date: October 23, 2026
This page lists every cookie the Chitti AI Assistant website (staging.chitti-ai-assistant.com) sets, what each one is for and how long it lasts. It is part of our Privacy Policy.
In short
- No analytics, advertising or tracking cookies, and no analytics or tracking scripts.
- Our own pages store nothing in your browser's local storage or session storage.
- Two pages load a script from another company: the bot check on the sign-up and password-reset pages (Cloudflare), and the payment form on the payment page (Stripe).
1. Cookies set by our website
| Name | What it is for | How long | Needed? |
|---|---|---|---|
__Host-chitti_session |
Keeps you signed in, and remembers the steps of a sign-in that is under way (including Sign in with Google and signing in the desktop app). | 7 days if you choose "Keep me signed in"; otherwise until you close the browser | Strictly necessary |
chitti_app_link |
Only after you sign in to the desktop app through this browser: a random value the app also keeps, so that when you sign in from the app again its sign-in page opens in a tab you already have open instead of a new one. It does not sign you in and says nothing about you. | 365 days | Strictly necessary |
__Host-chitti_csrf |
Security: proves that a form you send was made by our website, not by another site. | 364 days | Strictly necessary |
messages |
Carries a one-time notice (for example "Password changed") to the next page you see. | Until you close the browser; removed as soon as the notice is shown | Strictly necessary |
tz |
Your browser's time zone (such as "Europe/London"), so that times on the site are shown in your own time zone. Set by our own script; nothing else is stored in it. | 1 year | Not strictly necessary (a preference): without it, times are shown in UTC |
chitti_ref |
Only when you open someone's invite link: remembers the invite code, so that you get the referral discount if you sign up later. Signed, so it cannot be altered. | 30 days | Not strictly necessary: without it, the invite is not applied |
All of these are first-party cookies: only our website can read them. On our live site the sign-in and security cookies are sent only over HTTPS and cannot be read by scripts on the page.
The two cookies that are not strictly necessary
tzholds only your time zone's name, so that times are shown in your time zone. It is not used to identify you or follow you anywhere.chitti_refis set only when you open someone's invite link, and holds only that invite code, for 30 days. The page you land on says so. It is used only to give you the referral discount and to let the person who invited you see that someone joined.
Neither is used for advertising or analytics, and neither is shared with anyone. We therefore do not show a cookie banner. You can delete either of them at any time in your browser (see section 4).
2. Other companies on a few pages
- Cloudflare Turnstile (sign-up and password-reset pages only) checks that you are not a bot. It runs from challenges.cloudflare.com in a frame of its own; what it stores is set by Cloudflare under its own privacy policy.
- Stripe (the payment page only) shows the card form and handles the payment. Stripe's script can set its own cookies, for example to prevent fraud, under Stripe's privacy policy.
- Google: if you choose Sign in with Google, you are sent to Google's own site to choose your account. Our website sets no Google cookies; any cookies there are Google's own.
3. The desktop app
The desktop app does not use cookies. It keeps its sign-in in your computer's keychain and its settings in your system's own settings store.
4. Controlling cookies
You can delete cookies or block them in your browser's settings. If you block the sign-in or security cookies you
will not be able to sign in. Deleting tz only means times are shown in UTC until it is set again.
Deleting chitti_ref before you sign up means the invite, and its discount, are not applied.
5. Changes to this policy
When the cookies we use change, we will update this page and its effective date.
6. Contact
Chitti AI Assistant (staging.chitti-ai-assistant.com). Email support@chitti-ai-assistant.com.