Essential cookies only.

Azure AI (“the service”) is operated by [OPERATOR LEGAL NAME — PLACEHOLDER]. The legal operator name is still to be confirmed; it is shown as a placeholder until then.

Questions about this policy can be raised in the Azure Discord community.

Session cookie (__Host-azure_session over HTTPS, azure_session for local development). Holds the signed-in session token. HTTP-only, SameSite=Lax, Secure over HTTPS, 30-day maximum age. Deleted on sign-out. Without it, staying signed in is impossible.

Cloudflare Turnstile cookies (set by challenges.cloudflare.com). Created only when the security challenge loads during signup, sign-in, or verification-code resend. Used exclusively for bot and abuse prevention, never for advertising.

That is the complete list. The service runs no analytics beacons, no advertising pixels, and no social-media trackers.

Preferences and workspace state — chat history, selected model, reasoning level, panel widths, image settings, and dismissed update notices — are kept in first-party localStorage on the device, not in cookies. Clearing site data signs nothing out but removes local chat history and resets preferences to defaults.

Because every cookie the service sets is strictly necessary for sign-in or security, and no optional tracking exists, no consent banner is required. Introducing any optional cookie or tracker in future requires updating this policy first and adding consent controls before the tracker loads. See the Privacy Policy for the full data picture.

Browsers can block or delete cookies per site. Blocking the session cookie signs the account out and disables authenticated features; anonymous chat allowances continue to work. Blocking challenges.cloudflare.com disables the Turnstile challenge, which prevents signup, sign-in, and code resends.