Cookie Policy

Last updated: November 1, 2026

1. What Are Cookies

Cookies are small text files a website stores in your browser. YourFacelessFactory uses a small, deliberately short list of them — no ad-tracking, no cross-site profiling. The only cookies that need your permission are Google Analytics' and YouTube's, and they're set only if you allow them (see section 4).

2. Cookies We Use

Session cookie (essential) — keeps you signed in, including the anonymous session used to build templates before you create an account. It lasts up to 30 days and is removed when you log out. Without it, the Service can't tell you're signed in between page loads.
Known-device cookie (essential, for security) — set when you log in with your email and password. If someone else keeps guessing your password, we stop accepting log-ins for your account for a while, but this browser can still log you in. It holds no password, is only sent to our log-in form, and lasts up to 180 days.
Google sign-in cookie (essential) — set only while you sign in with Google. It ties Google's answer to the sign-in you started, so no one else can slip their own account into your browser. It lasts at most 10 minutes and is removed as soon as you're signed in.
YouTube connection cookies (essential) — set only while you connect a YouTube channel, on the Auto-post page or from a template. One ties Google's answer to the connection you started; the other remembers that you started it from a template, so the small window Google's screen opens in can close itself afterwards. They last at most 10 minutes and are removed once they're used.
Instagram and TikTok connection cookies (essential) — instagram_oauth_state / tiktok_oauth_state, set only while you connect an Instagram or TikTok account on the Auto-post page. Like the YouTube one, it ties Instagram's or TikTok's answer to the connection you started, lasts at most 10 minutes and is removed once it's used.

3. Local Storage (Not a Cookie, But Related)

We also use your browser's local storage — not a cookie, and never sent to our servers — to remember your light/dark theme preference, your cookie choice (kept for 12 months, after which we ask again), whether you paused the home page animations, whether you tucked away or turned off the "Get started" popup on the Your videos and Templates pages, and how you like to see your videos and the calendar (as cards or a list, a month or a list of days). While a tab is open, its session storage keeps the video you were about to make while you log in, the template you were building while you make a character for it, and which Auto-post schedule you have open. This stays entirely on your device.

4. Third-Party Cookies

Google Analytics (only if you allow it). We use Google Analytics to count visits and see which pages are used, so we can improve the site. Nothing is loaded from Google Analytics until you tick "Analytics" or choose "Allow all" in the cookie banner. It then sets the cookies _ga and _ga_<id> (kept for up to 2 years) and sends Google, which runs it, information about your visit: the page's address (without anything after a "?"), the page you came from, your browser, device type and approximate location, and how you use the page. Google Analytics doesn't store your IP address. We don't send your name, email address or account ID to it, and we don't use it for advertising. It isn't used on the log-in, sign-up, password or email-confirmation pages. This is covered by the Google Privacy Policy.

YouTube (only if you allow it). Our home page shows example videos from YouTube. Nothing is loaded from YouTube until you tick "YouTube videos", choose "Allow all", or press "Allow YouTube" next to the videos. After that, the videos are played by YouTube's embedded player in its privacy-enhanced mode, together with the channels' profile pictures. YouTube, which is part of Google, then receives your IP address and information about your browser, and may set or read its own cookies and similar storage. This is covered by the Google Privacy Policy and how Google uses cookies, not by this policy. If you don't allow them, the videos simply don't play.

When you purchase tokens, you're redirected to Stripe's own hosted checkout page, which may set its own cookies under Stripe's domain, governed by Stripe's own cookie and privacy policies — not this one.

5. Managing Cookies

You can change your choices at any time with , which is also at the bottom of every page. Taking your permission back stops Google Analytics (and removes its cookies) and stops the videos from loading, from then on. To remove cookies YouTube has already set, clear them in your browser's settings.

Most browsers let you block or delete cookies in their settings. Blocking our session cookie will prevent you from staying signed in, which will break core parts of the Service (like generating a video).

6. Changes to This Policy

We may update this Cookie Policy from time to time. We'll update the "Last updated" date above when we do.

7. Contact

Questions about our cookie use? Reach out via our Contact page.