Cookie Policy

This policy explains the cookies and similar technologies DIYai.app uses. It should be read with our Privacy Policy. Operator: DIY AI, a sole trader in the United Kingdom, trading as DIYai.app. Contact: support@diyai.app.

What we use today

To run the product we use strictly necessary cookies and on-device storage. We do not set our own analytics or social-media tracking cookies.

When Google banner ads are enabled for guests and Free accounts, Google AdSense (or Ad Manager) may set advertising cookies. Pro, Ultra, and accounts marked ads-removed do not load those banners. If advertising cookies are used, UK PECR may require consent before they are set; we will show a consent choice when that applies. Until ads are switched on in admin, this site uses an informational notice rather than a consent wall.

Cookies

• diyai_admin_session — httpOnly session cookie for the private admin console. Set only after an admin signs in. Expires after 12 hours. Strictly necessary for that back office, not for the homeowner app.
• Supabase auth cookies — set after you sign in (email and password, Google, Facebook, Microsoft, or Apple) so we can keep your session. Strictly necessary when you use an account. Names typically start with sb-.
• Google advertising cookies — only when banner ads are enabled and shown. Set by Google’s ad scripts (for example under googlesyndication / doubleclick domains) to deliver and measure ads. Not used for Pro / Ultra / ads-removed sessions that hide banners.

On-device storage (not cookies)

Guests use local-first storage so the coach works without an account. After you sign in, that device’s guest data is uploaded once to your cloud account; the signed-in app then reads and writes the database, and may keep a local cache. Keys include:

• localStorage — diyai_user_profile, diyai_projects, diyai_passport, diyai_safety_progress, diyai_onboarding, diyai_weekly_activity, diyai_toolbox, diyai_snags (and related keys), theme preference (next-themes), and diyai_cookie_notice_dismissed.
• sessionStorage — diyai_beta_banner_dismissed so the public beta banner stays hidden for this browser tab until you close it.
• IndexedDB — diyai_design_assets for Design Studio images. Signed-in users also sync those images to cloud storage.

Admin site-settings drafts may also be saved in this browser under diyai_admin_site_settings_v1.

How to delete site data

In your browser settings, clear cookies and site data for diyai.app (or localhost when developing). That removes guest projects, passport items, preferences, and local caches on this device. It cannot be undone for device-only data.

Clearing the browser does not delete your signed-in cloud account. Signed-in users can erase that account from Account. To receive a copy of the data we hold, email support@diyai.app from the address on your account (see the Privacy Policy).

Questions: support@diyai.app.