Cookie Policy
What Clonebased stores in your browser, and what a clone's site stores on its students' devices.
Last updated: 29 October 2026
On clonebased.com
We set no analytics, advertising, or tracking cookies. What we do store:
| Name | Purpose | Lifetime |
|---|---|---|
sb-*-auth-token (cookie) |
Your sign-in session | Persistent (roughly 400 days) by default. Session-only if you untick "Remember this device" at sign-in |
sb-*-auth-token-code-verifier (cookie) |
A one-time value that completes an email sign-in or password-reset link securely | Removed once the link is used; if the link is never used, it expires on its own (roughly 400 days) |
cb-role (cookie) |
Cached account-role lookup | 5 minutes |
cb-remember-me (cookie) |
Remembers your "Remember this device" choice | 1 year |
cb-theme (cookie) |
Light or dark theme, for the marketing site and the dashboard alike | 1 year |
cb_preview_viewport_mode (localStorage) |
Your last editor preview viewport (desktop/mobile) | Until cleared |
cb_inline_edit_tooltip_dismissed (localStorage) |
Remembers you have seen the tip about editing a clone's site directly | Until cleared |
cb-signup-intent (localStorage) |
Which button opened sign-up, so your new account lands where you were going | Removed when it is read, and ignored after 1 hour |
cb-pending-link (sessionStorage) |
The YouTube link you typed into the page's first box, so a refresh before you sign up keeps it | Removed when you clear the box. Until you close the tab |
cb-pending-token (localStorage) |
The claim code for a clone you started before signing up | Removed when the account is created. Until cleared if you never sign up |
cb-arrival-conversation (sessionStorage) |
The questions and answers from a build, carried into the editor | Until you close the tab |
cb-chat-draft-… (sessionStorage) |
An editor message you had typed when your sign-in expired, so it is not lost | Removed when you send it. Until you close the tab otherwise |
cb:dunning-banner-dismissed (sessionStorage) |
Remembers you dismissed the notice about a failed payment | Until you close the tab |
cb:key-bar-dismissed (sessionStorage) |
Remembers you dismissed the notice about your Anthropic key | Until you close the tab |
cb-celebrated:… (sessionStorage) |
Remembers that the upgrade celebration has already played | Until you close the tab |
cb:payload-retry (sessionStorage) |
Reloads a page once if its code arrived incomplete | Until you close the tab |
cb:error-retry (sessionStorage) |
After you press "Try again" on an error page, reloads the page if it fails the same way again within ten seconds | Removed when it is read, and ignored after ten seconds |
transformers-cache (the browser's Cache API) |
The speech-recognition model, downloaded once from Hugging Face when you first add course video, so the video is transcribed on your device without downloading it again | Until you clear this site's data |
cb-account-deleted (sessionStorage) |
Shows the notice that your account was deleted, once, on the page you land on afterwards | Removed when you close the notice. Ignored after one minute |
Nothing in this list is shared with a third party. The cookies are sent to our own servers with each request — that is how a cookie works, and how sign-in works. What is stored in localStorage or sessionStorage stays in your browser.
When you try your own clone in the dashboard, your conversations with it are kept in your browser's own database (clonebased-chats, IndexedDB), exactly as a student's are on their device (below). They are never sent to us to be stored.
Cloudflare Turnstile provides invisible bot protection on our forms (sign-up, sign-in, password recovery, the clone-building input and account deletion) and may set its own cookies to function. It is required for security.
Clonebased.com sets no non-essential cookies: everything listed here is needed for the product to work, which is why there is no cookie banner.
On a clone's site
A published clone's site, and a private preview of one, set no analytics, advertising, or tracking cookies, and Clonebased does not track visitors across sites or build profiles. The site shows no cookie notice because there is nothing to notify about beyond what makes it work:
| Name | Purpose | Lifetime |
|---|---|---|
clonebased-chats (IndexedDB) |
The student's signed-in session, bound to the one clone's site it was created on — kept in the browser's own storage, not in a cookie, and sent only with the student's questions — and their conversations with the clone, every chat they start, so they can return to it — each shown only to the login that had it | The session: until the student signs out; it stops working when their login ends, and is removed once it has run out. The chats: until the student clears their browser's site data. Nothing in it is sent to our servers to be kept |
cb-site-fresh:… (sessionStorage) |
Reloads the site's page once when a newer version of it has been published, and never twice for the same version | Until you close the tab |
The creator's avatar and banner on the site are served from our own storage, or from YouTube's image hosts if they could not be copied when the clone was built. Error monitoring (Sentry) runs in the visitor's browser as well as on our servers: it reports errors and nothing else; it sets no cookies and does not identify visitors.
If you do not want the session kept, do not sign in: the site's public page works without it. The chat behind sign-in needs it, and signing out removes it.
Contact
hello@clonebased.com · ApeTec Ltd, registered in England and Wales, company number 17065917. Registered office: 124–128 City Road, London EC1V 2NX.