# Cookie Policy

[Source](https://anysearch.com/legal?type=cookie)

# AnySearch Cookie Policy

> **Version**: v1.3
> **Publication Date**: OCT 28, 2026
> **Effective Date**: OCT 28, 2026

---

**This Cookie Policy (hereinafter referred to as “this Policy”) explains how AnySearch (anysearch.com, hereinafter referred to as “this Website”) uses cookies and similar technologies to collect and process your information. This Policy forms an integral part of the AnySearch Privacy Policy. Matters not addressed in this Policy are governed by the AnySearch Privacy Policy.**

## I. WHAT ARE COOKIES

Cookies are small text files that a website stores in your browser when you visit it. Cookies enable a website to remember your preferences, login status, and other information, thereby providing a better experience upon subsequent visits.

In addition to cookies, we may use the following similar technologies (hereinafter collectively referred to as "Cookies and Similar Technologies"):

| Technology          | Description                                                                                     |
| ------------------- | ----------------------------------------------------------------------------------------------- |
| **Local Storage**   | Browser local storage for persistently storing non-sensitive data such as interface preferences |
| **Session Storage** | Browser session storage, automatically cleared when the page is closed                          |
| **Pixel Tag**       | Tiny images embedded in pages or emails, used for counting page views and email opens           |
| **Web Beacon**      | Similar to Pixel Tags, used for tracking user behavior and measuring marketing effectiveness    |
| **SDK Tracking**    | Third-party analytics SDKs integrated into web pages for collecting user behavior data          |

---

## II. TYPES OF COOKIES WE USE

We classify cookies into the following four categories based on their purpose:

### 2.1 Strictly Necessary Cookies

These cookies are essential for the proper functioning of the website and cannot be disabled. They are typically set in response to your specific actions (such as logging in or filling out forms).

| Cookie Name      | Provider  | Purpose                                         | Duration         |
| ---------------- | --------- | ----------------------------------------------- | ---------------- |
| `auth_token`     | AnySearch | JWT authentication token, maintains login state | Session / 7 days |
| `refresh_token`  | AnySearch | Token refresh credential for seamless re-login  | 30 days          |
| `csrf_token`     | AnySearch | Prevents Cross-Site Request Forgery attacks     | Session          |
| `cookie_consent` | AnySearch | Records your cookie preference choices          | 12 months        |

**Legal basis:** Necessary for providing the service you have requested (no separate consent required under the Personal Data (Privacy) Ordinance). Payment-security cookies set by Stripe fall within this category and are listed in Section III (Third-Party Cookies and SDKs).

### 2.2 Functional Cookies

These cookies are used to remember your preference settings and provide a personalized experience. The website remains usable if these are disabled, but some features may be limited.

| Cookie Name         | Provider  | Purpose                                     | Duration  |
| ------------------- | --------- | ------------------------------------------- | --------- |
| `locale`            | AnySearch | Remembers your language preference          | 12 months |
| `theme`             | AnySearch | Remembers your interface theme (light/dark) | 12 months |
| `sidebar_collapsed` | AnySearch | Remembers console sidebar collapse state    | 12 months |
| `dashboard_layout`  | AnySearch | Remembers dashboard layout preferences      | 12 months |

**Legal basis:** Your explicit consent.

### 2.3 Analytics Cookies

These cookies help us understand how visitors use this website so that we can improve website performance and user experience. The data collected is aggregated and does not identify you personally.

| Cookie / Technology      | Provider         | Purpose                                                             | Duration  |
| ------------------------ | ---------------- | ------------------------------------------------------------------- | --------- |
| `_ga`                    | Google Analytics | Distinguishes unique users, counts website visits                   | 13 months |
| `_ga_<ID>`               | Google Analytics | Maintains session state                                             | 13 months |
| `_gid`                   | Google Analytics | Distinguishes users (24-hour granularity)                           | 24 hours  |
| `_gat`                   | Google Analytics | Limits request frequency                                            | 1 minute  |
| Proprietary Tracking SDK | AnySearch        | Page dwell time, feature click heatmaps, conversion funnel analysis | Session   |

**Data we collect through analytics cookies and tracking SDKs includes:**

- Page views (PV) and unique visitors (UV);
- Page dwell time and bounce rate;
- User navigation paths and feature usage frequency;
- Interaction behaviors such as button clicks and form submissions;
- Conversion funnel data (key milestones: registration, Key creation, first API call, etc.);
- Traffic sources (search engines, external links, direct access);
- Device type, screen resolution, browser type and version;
- Approximate geographic location (city level, based on IP address).

**Special Note:** For our global user base, we primarily use Google Analytics and other compliant international tracking services. For users from the European Economic Area (EEA), we block all non-essential cookies and tracking scripts by default until you explicitly click "Accept (Opt-in)" through the cookie banner.

Analytics and advertising-conversion tools are loaded only after a clear, specific, and withdrawable opt-in consent. The tools may include Google Analytics, Google Ads conversion tracking, Meta/Facebook Pixel, and Twitter/X Ads tags. They may process page URLs, referring pages, device and browser information, event timestamps, button or page interactions, advertising clicks, and conversion information. Unless separate consent is obtained, we do not send internal user IDs, email addresses, telephone numbers, API Keys, queries, or search results.

These data may be transferred to countries or regions where the providers operate. The actual retention period on a third-party platform is governed by that provider’s privacy policy and account settings. AnySearch must not describe third-party platform data as being deleted within 24 hours unless a verifiable deletion mechanism exists.

**Legal basis:** Your explicit consent.

### 2.4 Marketing Cookies

These cookies are used for measuring advertising effectiveness and conducting remarketing. We currently use the following marketing-related technologies:

| Cookie / Technology    | Provider  | Purpose                                              | Duration |
| ---------------------- | --------- | ---------------------------------------------------- | -------- |
| UTM Parameter Tracking | AnySearch | Records marketing channel sources (utm_source, etc.) | Session  |

**Special Note:** We do not use cookie data to display personalized advertisements to you. Marketing cookies are used solely for measuring channel effectiveness and helping us optimize promotional strategies.

## **Legal basis:** Your explicit consent.

## III. THIRD-PARTY COOKIES AND SDKs

Our website integrates the following third-party services, which may set their own cookies or collect data through SDKs:

| Third-Party Service | Data Types                                                                                                                                                               | Purpose                                                                                                                  | Loaded Only After Consent?                                                                                                                | Receiving Countries/Regions                                                                          | Third-Party Privacy Policy                                                                                          | Retention Period                                                                                                                                                | Withdrawal Method                                                                                                                                                                    |
| ------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | ------------------------------------------------------------------------------------------------------------------------ | ----------------------------------------------------------------------------------------------------------------------------------------- | ---------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |
| Google Analytics    | IP address (subject to applicable privacy safeguards), device and browser information, page-view data, usage data, cookie/similar technology identifiers, etc.           | Website traffic analytics, user behavior analysis, product and service improvement, statistical and performance analysis | **Yes.** Except for strictly necessary technical storage, loaded only after the user provides consent through the Cookie/Privacy Settings | May include the United States and other countries/regions where Google operates or provides services | Google Analytics / Google Privacy Policy                                                                            | Retained in accordance with the configured Analytics data retention period and for no longer than necessary for the stated purposes                             | Users may withdraw analytics Cookie consent through the website's Cookie/Privacy Settings and may also manage relevant settings through browser controls or tools provided by Google |
| Google Ads          | Cookie identifiers, advertising identifiers, device and browser information, IP address, advertising interaction and conversion data, website visit and event data, etc. | Advertising, conversion measurement, remarketing, audience analysis, and advertising optimization                        | **Yes.** Loaded only after applicable consent for advertising/tracking technologies has been obtained                                     | May include the United States and other countries/regions where Google operates or provides services | Google Ads / Google Privacy Policy                                                                                  | Retained in accordance with Google Ads and relevant account settings, and only for as long as necessary for advertising, measurement, and compliance purposes   | Users may withdraw consent through the website's Cookie/Privacy Settings and manage personalized advertising through Google Ads Settings and other tools provided by Google          |
| Meta / Facebook     | Cookie identifiers, device information, IP address, browsing and interaction data, advertising click and conversion data, event data, etc.                               | Advertising, conversion tracking, remarketing, audience creation, advertising measurement, and optimization              | **Yes.** Loaded only after applicable consent for advertising/tracking technologies has been obtained                                     | May include the United States and other countries/regions where Meta operates or provides services   | Meta Privacy Policy                                                                                                 | Retained in accordance with the relevant Meta products and account settings and only for as long as necessary for the applicable purposes and legal obligations | Users may withdraw consent through the website's Cookie/Privacy Settings and manage relevant data use through Meta's privacy and advertising settings                                |
| Twitter / X         | Cookie identifiers, device and browser information, IP address, website visit and interaction data, advertising and conversion data, etc.                                | Advertising, conversion tracking, audience analysis, advertising measurement, and optimization                           | **Yes.** Loaded only after applicable consent for advertising/tracking technologies has been obtained                                     | May include the United States and other countries/regions where X operates or provides services      | X Privacy Policy                                                                                                    | Retained in accordance with applicable X services, account settings, and legal requirements, and only for as long as necessary for the relevant purposes        | Users may withdraw consent through the website's Cookie/Privacy Settings and manage relevant data use through X's privacy and advertising settings                                   |
| Stripe              | Cookie identifiers (`__stripe_mid`, `__stripe_sid`, `m`), device/browser information, IP address, payment and fraud-prevention signals                                   | Payment processing, payment session security, fraud prevention                                                           | **No** — strictly necessary for the payment you initiate; loaded only on the payment page; not used for advertising                       | United States and other countries/regions where Stripe operates                                      | Stripe Privacy Policy (https://stripe.com/privacy) / Stripe Cookie Policy (https://stripe.com/cookies-policy/legal) | `__stripe_mid`: 1 year; `__stripe_sid`: 30 minutes; other Stripe cookies per Stripe's Cookie Policy                                                             | Cannot be disabled without preventing payment; blockable via browser settings (payment may fail)                                                                                     |

**Note:** For the advertising, analytics, and tracking services listed above, where required by applicable law, we will load the relevant Cookies, SDKs, Pixels, or other tracking technologies only after obtaining the user's applicable consent. Users may withdraw or modify such consent at any time through the website's Cookie/Privacy Settings. Data processing by these third-party providers remains subject to their respective privacy policies and applicable laws.

## IV. TRACKING DATA COLLECTION STATEMENT

### 4.1 What Is Tracking

Tracking refers to the embedding of data collection code at key points in web pages or applications that automatically reports event data when users trigger specific behaviors. We use tracking to understand product usage and continuously improve the user experience.

### 4.2 Tracking Events We Collect

| Event Category           | Specific Events                             | Data Collected                                          | Purpose                |
| ------------------------ | ------------------------------------------- | ------------------------------------------------------- | ---------------------- |
| **Page Browsing**        | Page load, page leave                       | Page URL, dwell time, referring page                    | Content optimization   |
| **Account Behavior**     | Registration, login, logout                 | Event time, success/failure status (excluding password) | Conversion analysis    |
| **Core Features**        | Create API Key, view usage, purchase plan   | Event time, operation type (excluding Key plaintext)    | Feature optimization   |
| **Interaction Behavior** | Button clicks, tab switches, search box use | Element identifier, click position                      | Interface optimization |
| **Anomaly Monitoring**   | Page errors, interface timeouts             | Error type, stack summary (masked)                      | Quality assurance      |

### 4.3 Principles for Processing Tracking Data

- **Data Minimization:** Only behavioral data necessary for product improvement is collected; input box content, chat records, and other private information are not collected;
- **Masking:** All fields that may contain sensitive information (such as API Keys, query content) are masked or removed before reporting;
- **Aggregated Analysis:** Tracking data is used in aggregated statistical form and is not used for individual user behavioral profiling;
- **Separate Storage:** Tracking data is stored separately from your account information and associated only through anonymous identifiers;
- **Periodic Deletion:** Raw tracking events stored in AnySearch-controlled systems are retained for no longer than 24 hours and are then deleted. Aggregated statistics may be retained only where they cannot identify an individual and cannot be re-associated with an account, query, or API Key. Data retained by Google, Meta, X, or other third parties is not directly controlled by AnySearch, and the applicable retention period must be disclosed in the consent interface or this Policy.

### 4.4 Restrictions on Transmitting Identifiers to Analytics and Advertising Platforms

We do not transmit internal user IDs or other direct identifiers to Google, Meta, X, or other analytics or advertising platforms. If session distinction is strictly necessary, we may use only a short-lived random session identifier that is not linked to an account, API Key, query content, or personal data. We will not enable User-ID features or place internal user IDs in URLs, event parameters, custom dimensions, or advertising-conversion parameters.

---

## V. HOW YOU MANAGE COOKIES

### 5.1 Cookie Preference Settings

We provide a cookie preference management tool. On your first visit, a pop-up window will offer clear and easy-to-select options: ‘Accept All’, ‘Reject Non-Essential Cookies’ and ‘Manage Settings’. For non-essential cookies or similar technologies that require prior consent under the law, we will not regard pre-selected options, closing the pop-up window, continuing to browse or failing to make a selection as consent.
In regions where prior consent is required by law, Google Analytics, Google Ads, Meta/Facebook Pixel, Twitter/X Ads and other non-essential analytics, advertising or tracking technologies will only be loaded once you have actively selected the relevant categories. Should you refuse or withdraw your consent, we will cease further collection of the relevant data, block any related events that have not yet been transmitted, and, to the extent technically feasible, delete any cookies set by AnySearch that are no longer necessary. With regard to data already received by third parties, we will process requests for deletion, restriction of processing or opt-out in accordance with our agreements with those third parties and applicable law. Refusing or withdrawing consent for non-essential cookies does not affect core functions such as login, account security, payment or services already purchased.
You may withdraw or adjust your choices at any time via the ‘Cookie Settings’ link at the bottom of the page. Upon withdrawal, we will cease further collection of the relevant data, block any related events that have not yet been transmitted, and, to the extent technically feasible, delete any cookies set by AnySearch that are no longer necessary. For data already received by third parties, we will process requests for deletion, restriction of processing or opt-out in accordance with our agreements with those third parties and applicable law. Withdrawal of consent does not affect processing carried out prior to withdrawal on the basis of valid consent.

### 5.2 Browser Settings

You may also manage cookies through your browser settings. Below are cookie management guides for major browsers:

| Browser     | Settings Path                                                       |
| ----------- | ------------------------------------------------------------------- |
| **Chrome**  | Settings → Privacy and Security → Cookies and other site data       |
| **Firefox** | Settings → Privacy & Security → Cookies and Site Data               |
| **Safari**  | Preferences → Privacy → Cookies and website data                    |
| **Edge**    | Settings → Cookies and site permissions → Manage and delete cookies |

### 5.3 Opting Out of Third-Party Analytics Tracking

You may opt out of data collection by specific third parties through the following means:

| Service          | Opt-out Method                                                                                  |
| ---------------- | ----------------------------------------------------------------------------------------------- |
| Google Analytics | Install the [Google Analytics Opt-out Browser Add-on](https://tools.google.com/dlpage/gaoptout) |

### 5.4 Impact of Disabling Cookies

| Cookie Type        | Impact After Disabling                                                                              |
| ------------------ | --------------------------------------------------------------------------------------------------- |
| Strictly Necessary | ⛔ Cannot log in, cannot use core console features                                                  |
| Functional         | ⚠️ Must reset language, theme, and other preferences each visit                                     |
| Analytics          | ✅ No impact on any features, but we cannot understand your usage experience to improve the product |
| Marketing          | ✅ No impact on any features                                                                        |

---

## VI. DO NOT TRACK (DNT) AND GLOBAL PRIVACY CONTROL (GPC)

To the extent required by applicable law, we recognise and respect the Global Privacy Control (GPC) or other legally recognised universal opt-out preference signals sent by browsers. Upon receipt of a valid signal, we will cease the sale of personal data, the sharing of data for cross-context behavioural advertising, and the processing of data for targeted advertising as defined by applicable law, in respect of the browser or device sending that signal.
The GPC does not affect the provision of services explicitly requested by the user, security protection, identity authentication, fraud prevention, or other strictly necessary processing. For analytics or advertising technologies that require prior consent under applicable law, the GPC does not replace our cookie consent mechanism; we will still not load these technologies unless the user has given valid consent.
If you are logged in, and where required by applicable law or where we are able to reasonably identify the relevant account, we will associate the opt-out choice with that account; otherwise, the choice will generally apply only to the browser or device sending the signal. You may need to reset your preferences after clearing your browser data, using a different browser or switching devices.
There are currently no uniform global legal or technical standards for ‘Do Not Track’ (DNT) signals. We will handle such signals in accordance with the law where applicable legislation confers legal effect upon them; in other circumstances, you may still manage your preferences via your cookie settings or the applicable privacy request channels.

## VII. CROSS-BORDER DATA TRANSFERS

7.1 When using Google Analytics, your anonymized browsing data may be transmitted to Google servers located in the United States. We have implemented the following measures to protect your data:

- IP anonymization (`anonymize_ip`) is enabled; Google will not record your full IP address;
- Google Signals are disabled; no cross-device tracking is performed;
- Data retention period is set to 14 months, with automatic deletion upon expiration.

    7.2 Data collected by our proprietary tracking SDK is stored within the Hong Kong Special Administrative Region and is not subject to cross-border transfer. If cross-border transfer of data outside Hong Kong is involved in the future, we will comply with the requirements of the Personal Data (Privacy) Ordinance and relevant guidelines, adopt appropriate safeguards, and obtain your explicit consent.

---

## VIII. COOKIE DATA RETENTION PERIODS

| Data Type                      | Retention Period                             | Expiry Handling                 |
| ------------------------------ | -------------------------------------------- | ------------------------------- |
| Session Cookies                | Automatically cleared when browser is closed | Automatically deleted           |
| Persistent Cookies             | See durations in Article II for each cookie  | Automatically expire            |
| Aggregated Statistical Reports | 36 months                                    | Retained in anonymized form     |
| Google Analytics Data          | 14 months (Google-side setting)              | Automatically deleted by Google |

---

## IX. UPDATES TO THIS POLICY

9.1 We may amend this Policy from time to time in response to business changes, technological updates, or legal and regulatory requirements.

9.2 The amended Policy will be published on this page with the "Effective Date" at the top updated. For material changes (such as new cookie types or third-party services, or significant changes in the purposes, means, or scope of data processing), we will re-obtain your explicit consent through website pop-ups, email, or other appropriate means.

9.3 We recommend that you periodically review this Policy to stay informed of our latest cookie usage practices.

---

## X. CONTACT US

If you have any questions regarding this Cookie Policy or wish to exercise your data rights, please contact us through the following means:

- **Email:** [support@anysearch.com](mailto:support@anysearch.com)
- **Cookie Settings Page:** [https://www.anysearch.com/legal?type=cookie](https://www.anysearch.com/legal?type=cookie)

---

