Cookie policy

Cookies we set

• create_io_session — strictly necessary. Holds your encrypted login session so you stay signed in (up to 30 days, or until you log out). Without it, accounts cannot work. It is HttpOnly (unreadable by page scripts) and sent only over HTTPS in production.

Browser storage (not cookies)

• createio-demo-* — guest builder drafts, kept only in your own browser so you can try templates without an account. Never sent to our servers.
• createio-cookie-consent — remembers whether you accepted or declined this notice, so we don't ask again.

Your consent choice

When you first visit, we ask you to accept or decline cookies. Because our only cookie is strictly necessary for login, the site works either way — declining simply records your preference and means we won't ask again on this browser. Clearing your browser storage resets the choice and the notice reappears.

Managing cookies

You can block or delete cookies in your browser settings at any time. Note that blocking create_io_session will sign you out and prevent logging in, since the session cannot be maintained without it.