Cookie Notice — Createrun

1. About this notice

1.1 This notice explains the cookies and similar browser storage used by the websites that Createrun Inc. operates:

our main website (createrun.ai);
the Createrun Store (store.createrun.ai); and
Createrun account sign-in (id.createrun.ai).

It tells you what each cookie does, how long it stays in your browser, and how to change your choice. Read it together with our Privacy Policy.

1.2 This notice does not cover self-hosted Createrun instances or applications that our customers build and run. The organization that operates the instance or application is responsible for its cookies.

2. What cookies are

2.1 A cookie is a small text file that a website stores in your browser. Your browser sends it back to the same website on later visits, so the site can recognize your browser, keep you signed in, or remember a choice you made.

2.2 Local storage is a similar browser feature. It lets a website keep small amounts of data on your device. Unlike a cookie, it is not sent to the website automatically. In this notice, "cookies" covers both.

2.3 A first-party cookie is set by the website you are visiting. A third-party cookie is set by another company, such as Google. A session cookie is deleted when you close your browser. A persistent cookie stays until it expires or you delete it.

3. The categories we use

3.1 Strictly necessary. These cookies make the websites work. They keep your visit together from page to page, protect forms against cross-site request forgery, keep you signed in, and remember your cookie choice. They are always on, because the websites cannot work properly without them. You can block them in your browser, but parts of the websites, including sign-in, will then stop working.

3.2 Functional. These entries remember a setting you chose yourself, such as the currency for Store prices or the view you picked on our main website. They are only created when you make that choice. They stay in your browser and are not used to follow you.

3.3 Analytics. We measure how our websites are used in two ways. (a) Our own first-party measurement, which is on by default: a random visitor identifier (cr_vid) lets us count visits and see which campaigns and pages lead to sign-ups. It is set by our own servers for the createrun.ai domain and its subdomains, it is not shared with advertising networks, and it is not set if you choose "Do not track me" or your browser sends Global Privacy Control. (b) Google Analytics, which is off by default and is set only if you choose "Accept analytics", or turn Analytics on under "Customize", in the cookie banner.

3.4 No advertising. We do not use advertising or marketing cookies, and we do not allow third-party advertising trackers on our websites. Our Google Analytics setup has Google signals and ad personalization switched off, and it tells Google that advertising storage, advertising user data and ad personalization are always "denied", whatever you choose.

4. How analytics works on our main website

Our own first-party measurement runs from your first visit unless you opt out with "Do not track me" or Global Privacy Control; it does not depend on the banner. The banner controls Google Analytics.

Before you choose, or if you select "Reject": the Google Analytics script is not loaded. Your browser sends nothing to Google Analytics, and no Google Analytics cookies are set. Choosing "Reject" can also pause our own measurement on createrun.ai for that browser; to switch our own measurement off reliably, use "Do not track me".
If you select "Accept analytics": the Google Analytics script loads and sets the _ga and _ga_672YN4S55M and _ga_TCVFH9RK8D cookies listed below. Google receives the address of the page you view, the page you came from, your browser and device type, and your IP address, which it uses to estimate your approximate location. We see this information only as statistics across visitors.
If you change your mind: choose "Reject" in Cookie settings. The script is not loaded on later pages, and our site deletes the _ga cookies it can reach.

Google processes this information for us as a service provider. You can read how Google uses information from sites that use its services at policies.google.com/technologies/partner-sites.

5. The cookies we use

5.1 This table lists the cookies and local storage entries our websites use as of September 28, 2026, including those our services set after you sign in or use a Store feature. Names written with <…> end in a random value that changes.

Name	Provider	Purpose	Category	Duration	Domain
`.AspNetCore.Session`	Createrun	Keeps your visit together from page to page, for example while you fill in a form	Strictly necessary	Ends when you close your browser	createrun.ai, store.createrun.ai
`cr_consent`	Createrun	Remembers your choices: whether you accepted Google Analytics in the cookie banner and whether you opted out of our own measurement with "Do not track me", with the version of the choice and the date you made it	Strictly necessary	6 months when set by the cookie banner; 13 months when set by our servers (for example after "Do not track me")	createrun.ai (cookie banner); .createrun.ai (set by our servers)
`cr_vid`	Createrun	A random identifier for your browser, used to count visits and to connect a visit to a later sign-up (see Privacy Policy Section 3). Readable only by our servers. Not set if you choose "Do not track me" or your browser sends Global Privacy Control.	Analytics (first-party), on unless you opt out	13 months from your first visit; not extended when you return	.createrun.ai
`cr-persona-v1` (local storage)	Createrun	Remembers the view you picked (builder, IT leader or partner) on pages that offer it	Functional	Until you clear your browser data	createrun.ai
`_ga`	Google	Distinguishes one visitor's browser from another, so that visits can be counted	Analytics, only if you accept	2 years (some browsers, including Chrome, cap this at 400 days)	.createrun.ai
`_ga_672YN4S55M`	Google	Keeps the state of your analytics session, such as when your visit started	Analytics, only if you accept	2 years (some browsers, including Chrome, cap this at 400 days)	.createrun.ai
`_ga_TCVFH9RK8D`	Google	Keeps the state of your analytics session, such as when your visit started	Analytics, only if you accept	2 years (some browsers, including Chrome, cap this at 400 days)	.createrun.ai
`.AspNetCore.Antiforgery.<…>`	Createrun	Protects forms, including sign-in and registration, against cross-site request forgery	Strictly necessary	Ends when you close your browser	store.createrun.ai, id.createrun.ai
`.AspNetCore.Correlation.<…>`, `.AspNetCore.OpenIdConnect.Nonce.<…>`	Createrun	Secure the hand-off when the Store sends you to Createrun account sign-in and back	Strictly necessary	15 minutes	store.createrun.ai
`__Host-CreaterunStore`	Createrun	Keeps you signed in to the Store after you sign in with your Createrun account	Strictly necessary	Ends when you close your browser; sign-in ends after 8 hours without activity	store.createrun.ai
`acq_session`	Createrun	Keeps your place while you get an app or an instance from the Store in several steps	Strictly necessary	15 minutes	store.createrun.ai
`.AspNetCore.Mvc.CookieTempDataProvider`	Createrun	Carries a short message, such as a confirmation, from one page to the next	Strictly necessary	Deleted once the message is shown	store.createrun.ai, id.createrun.ai
`authToken`, `userData` (local storage)	Createrun	Keep you signed in to Store features that run in your browser, and hold your name and email for display	Strictly necessary	Until you sign out or clear your browser data	store.createrun.ai
`currency`, `lang` (local storage)	Createrun	Remember the currency and language you chose for the Store	Functional	Until you clear your browser data	store.createrun.ai
`recentSearches`, `cr_license_info`, `cr_billing_info`, `cr_license_profiles` (local storage)	Createrun	Remember your recent Store searches and the licence and billing details you entered in the basket, so you do not have to type them again	Functional	Until you clear your browser data	store.createrun.ai
`__Host-CreaterunIDM`	Createrun	Keeps you signed in to your Createrun account, and lets the Store and other Createrun services sign you in without a new password	Strictly necessary	Ends when you close your browser; sign-in ends after 8 hours without activity	id.createrun.ai
`__Host-CreaterunIDM-Sessions`	Createrun	Remembers which Createrun accounts were recently signed in on this browser, so you can switch between them	Strictly necessary	60 days	id.createrun.ai

5.2 Payments. If you pay in the Store, the payment is handled by Stripe. Stripe may set its own cookies to prevent fraud. Those cookies are covered by Stripe's own cookie policy.

5.3 Files from other services. Our websites load fonts from Google Fonts and code libraries from jsDelivr and cdnjs. We saw no cookies from these services on our pages. They do receive your IP address and browser details when your browser downloads the files. See our Subprocessors page.

6. How to change your choice

6.1 Select Cookie settings at the bottom of any page on createrun.ai. The cookie banner opens with your current choice, and you can switch Google Analytics on or off and save. You can change your mind as often as you like.

6.2 Select "Do not track me" at the bottom of any page on createrun.ai to switch off our own measurement (cr_vid) and Google Analytics for that browser. Your browser can also send Global Privacy Control, which we treat the same way for our own measurement.

6.3 Your banner choice is kept for 6 months; after that, or if you delete the cr_consent cookie, we ask again. If you delete cr_consent after choosing "Do not track me", our own measurement starts again unless your browser sends Global Privacy Control.

6.4 Withdrawing consent or opting out does not affect information collected before you did so.

7. Browser controls

7.1 Most browsers let you see, block and delete cookies and site data. Blocking strictly necessary cookies will stop parts of our websites from working. Your browser's help pages explain how:

7.2 Google Analytics opt-out. Google offers a browser add-on that stops Google Analytics on every website you visit: tools.google.com/dlpage/gaoptout.

7.3 Do Not Track and Global Privacy Control. Our websites do not respond to browser "Do Not Track" signals, because there is no agreed standard for them. They do honor Global Privacy Control: when your browser sends it, we do not set cr_vid and do not record your visit. Google Analytics is never loaded unless you accept it in the banner.

8. Your rights, changes and contact

8.1 Depending on where you live, applicable data protection laws may give you rights over personal information collected through cookies. Our Privacy Policy explains those rights and how to use them.

8.2 We update this notice when the cookies we use change, and we change the date at the top.

8.3 Questions can be sent to privacy@createrun.com.