Cookie Notice
Effective date: November 3, 2026 · Last updated: November 3, 2026
This notice explains the cookies and similar browser storage we use on specialoccasion.ai, and how you can control them. It's part of our Privacy Policy. Our text-message service doesn't use cookies, and your conversations with your agent never go to any analytics tool.
The short version
- We use Google Analytics and Vercel's analytics to see how people use our public pages, which campaigns bring them, and how fast the site loads.
- We don't use advertising cookies, ad pixels, retargeting or remarketing, or session recording. We don't sell your information or share it for advertising.
- Analytics never gets your phone number, name, email, agent name, or messages, and doesn't run on our sign-in page or the private pages for your account, your approvals, or your gifts.
Cookies
| Cookie | Provider | What it's for | How long it lasts |
|---|---|---|---|
| `__Secure-next-auth.session-token` (sometimes split into `.0` and `.1`) | Special Occasion | Strictly necessary. Keeps you signed in on the web | 400 days |
| `__Host-next-auth.csrf-token` | Special Occasion | Strictly necessary. Protects against forged requests (security) | Until you close your browser |
| `__Secure-next-auth.callback-url` | Special Occasion | Strictly necessary. Returns you to the right page after you sign in | Until you close your browser |
| `_ga` | Google Analytics 4 (Google LLC), set as a first-party cookie on our site | Tells one visitor's visits apart from another's, using a random ID | Up to 2 years (Google's default), unless you or your browser delete it sooner |
| `_ga_<ID>` | Google Analytics 4 (Google LLC), set as a first-party cookie on our site | Keeps track of your current visit (session) | Up to 2 years (Google's default), unless you or your browser delete it sooner |
Some browsers delete these cookies sooner on their own.
Payment pages: our payment processor, Stripe, may set its own cookies on payment pages to prevent fraud. Stripe's privacy policy covers them.
Sign-in without cookies:
- Mobile app: keeps you signed in with a sign-in token stored in the app, not a cookie. It lasts 30 days.
- Tap-to-approve links: carry a signed token in the link itself, so you can approve a gift without signing in. It expires after 21 days.
Other browser storage (not cookies)
| What | Provider | What it's for | How long it lasts |
|---|---|---|---|
| Campaign tags (UTM), in session storage | Special Occasion | If you arrive from a link with campaign tags (for example, one of our social posts), it remembers which campaign it was, so our analytics can count it | Cleared when you close the tab |
| Cookie bar closed, in local storage | Special Occasion | Remembers that you closed our cookie bar, so it doesn't keep popping up | Until you clear your browser's site data |
Cookieless analytics
| Tool | Provider | What it's for | Cookies |
|---|---|---|---|
| Vercel Web Analytics | Vercel Inc. | Counts visits to our public pages: pages, referrers, country, and device and browser type | None. Before a page address is sent, we remove everything after the "?" except campaign (UTM) tags. |
| Vercel Speed Insights | Vercel Inc. | Measures how fast our public pages load for real visitors | None. Same page-address clean-up as above. |
What Google Analytics measures
On our public pages, Google Analytics counts page views, how far people scroll, outbound link clicks, video engagement, and four steps: starting signup, creating your agent, tapping a "text us" link, and tapping "Log in." It also records which campaign link brought you. We keep this data for 14 months, and the 14 months start over each time you visit again.
We've turned off Google signals and ads personalization, and Google Analytics is set not to store advertising data. Google processes this data on our behalf as our service provider. Google says Google Analytics 4 doesn't log or store IP addresses.
What we never do
- No advertising cookies, ad pixels, retargeting or remarketing, or session recording.
- No selling your information, and no sharing it for cross-context behavioral advertising.
- No phone numbers, names, emails, agent names, or messages sent to any analytics tool.
- No analytics on our sign-in page or the private pages for your account, your approvals, or your gifts.
Your choices
- Turn off Google Analytics: install Google's free Google Analytics Opt-out Browser Add-on. It stops Google Analytics on every site you visit.
- Block or delete cookies in your browser settings, including `_ga` and `_ga_<ID>`. If you block all cookies, signing in may stop working. Clearing your browser's site data also clears the cookie bar's "closed" note, so the bar will show again.
- Global Privacy Control (GPC): we treat a GPC signal as a request to opt out of the sale and sharing of your personal information. We don't sell or share it, and we also don't load Google Analytics in a browser that sends GPC, so no `_ga` or `_ga_<ID>` cookies are set. Vercel's cookieless analytics still count the visit. See Your Privacy Choices.
- Do Not Track: there's no common standard for Do Not Track signals, so we respond to GPC instead.
Changes
When we add or remove a cookie or tool, we'll update this notice and its "last updated" date.
Contact
Questions? Email support@specialoccasion.ai.
Special Occasion, Inc. · 169 Madison Ave STE 69154, New York, NY 10016