Cookie policy disclosure
Copy-paste language for the "cookies" section of your policy, covering what arcy.js actually sets.
arcy.js does not set any cookies. It uses browser localStorage only. Most cookie policies use "cookies" as a catch-all heading for any client-side storage, so the text below is written to fit under that heading while stating this accurately.
This is boilerplate, not legal advice. Have your own counsel review it before publishing.
What to paste
ARCY AI (Product Assistance)
ARCY AI, which powers in-product guidance inside [Your Product Name], does
not set cookies. It stores the following in your browser's local storage
only:
| Category | Purpose | Lifespan |
|-------------------------|--------------------------------------------------------------------------------------|----------------------------------|
| Visitor identifier and widget state | An anonymous identifier and the current conversation, used to recognize returning visitors and to continue a conversation across page loads | Until you clear browser storage |
| Session state | The current session and telemetry state with the in-product assistant | Until you clear browser storage, or it expires on its own |
| Conversation | The current conversation's content, so it holds context if you navigate the page | 24 hours after your last message, or until you clear browser storage |
| Measurement state | Which measurement arm, if any, your session was assigned to, for product-improvement measurement | Until you clear browser storage |
None of this is used for cross-site advertising or third-party tracking. It
is used only to operate the in-product assistant within [Your Product Name].
You can clear it at any time by clearing your browser's site data for
[Your Product Name].Technical reference (for CMP / cookie-scanner configuration)
If your consent management platform needs literal storage key names to allowlist rather than a purpose description: every key is prefixed arcy. and suffixed with your environment's Token, for example arcy.shell.<token>. The current prefixes are arcy.shell., arcy.session., arcy.telemetry., arcy.telemetry.stop., and arcy.lift.. All are localStorage; arcy.js never uses sessionStorage or cookies.
This reference is for your own configuration use, not intended to be pasted into a public-facing policy.
Notes on filling this in
- If your own cookie consent banner or CMP inventories storage by category, classify these as "functional/necessary" storage, not "analytics" or "advertising." Confirm this classification with your own counsel or CMP vendor.
- If you never call
arcy.init()for a user, none of this storage is written for that session.