Cookie Policy

Cookies are small text files stored on your device when you visit a website. They help websites remember preferences, keep sessions secure, and understand how pages are being used.

• to keep you logged in and maintain your authenticated session;
• to remember settings that improve your experience;
• to support checkout and subscription-related flows; and
• to understand product usage and improve reliability and performance.

When you land on marketing surfaces (the home page, the funnel pages), we set the following cookies. They are first-party (set by liliths.art itself, not by an embedded third party):

• _fbp — a per-browser identifier in the format documented by Meta. Persists for 90 days. Used to attribute conversions when the same browser later completes a purchase. Always set, even if you didn’t arrive from a Meta ad.
• _fbc — captures the click id (fbclid) when you arrive from a Meta ad. 90-day retention. Pairs with _fbp for attribution.
• _lai_fbclid, _lai_gclid, _lai_ttclid — server-internal copies of the click ids from Meta, Google Ads, and TikTok. Marked HttpOnly (the browser cannot read them). Used only at form-submit time so the backend can carry attribution into the Stripe webhook. 90-day retention.
• _lai_landing, _lai_referrer — the first URL you landed on and the first referring site, captured once per browser. HttpOnly, server-internal. Used for first-touch attribution.
• liliths.session_token (and the __Secure--prefixed variant on https deployments) — your authenticated session, set on sign-in. HttpOnly, 30-day rolling expiry.

Most browsers let you control cookies through browser settings. Blocking some cookies may affect the functionality of login, checkout, or account features.

If you have questions about this Cookie Policy, contact [email protected].