Cookie Policy
Last updated: 2026-09-29 · Effective: 2026-04-22
This policy explains what cookies are, how Marcomm AI uses them, and how you can manage your preferences.
You can change or withdraw your choices at any time via the page.
What are cookies?
Cookies are small text files stored on your device when you visit a website. They let the site remember things about your visit (like your sign-in state, language, and preferences) so you don't have to re-enter them on every page.
This policy uses "cookies" as a shorthand for cookies and similar technologies such as local storage, session storage, and pixel tags. All references to cookies include these equivalent technologies where applicable.
Legal basis for using cookies
Under GDPR, UK GDPR, and similar regulations, we use one of the following legal bases for each cookie category:
- Consent: Used for functional, analytics, and marketing cookies. You can withdraw consent any time.
- Performance of contract: Used for essential cookies necessary to deliver the service you signed up for.
- Legitimate interests: Used for security and fraud prevention cookies, balanced against your privacy rights.
- Legal obligation: Used where retaining certain information is required by applicable law.
Cookie categories
We classify cookies into four categories. Essential cookies are always active because the service cannot run without them. You can turn the others on or off at any time.
Essential
RequiredRequired for sign-in, security, and core service functionality. These cannot be disabled.
Legal basis: Performance of contract + legitimate interests
Functional
Remember your preferences (language, theme, display settings) to personalize your experience.
Legal basis: Consent
Analytics
Help us understand how visitors use Marcomm AI so we can improve the product. Fully anonymized.
Legal basis: Consent
Marketing
Used to measure the effectiveness of marketing campaigns and show relevant offers.
Legal basis: Consent
First-party cookies
These are cookies set directly by marcomm.works. They are used for authentication, security, and remembering your preferences.
| Purpose | Provider | Category | Duration |
|---|---|---|---|
| Authenticated session token | marcomm.works | Essential | 30 days |
| OAuth callback redirect state | marcomm.works | Essential | Session |
| CSRF token, protects against cross-site forgery | marcomm.works | Essential | Session |
| Stores your cookie preferences | marcomm.works | Essential | 12 months |
| Counts return visits to customer newsrooms (only when the visitor agrees) | marcomm.works | Analytics | 13 months |
| Remembers your selected language | marcomm.works | Functional | 12 months |
Third-party cookies and processors
Some cookies are set by third parties we work with to deliver Marcomm AI. The location listed for each one is where that company is registered, which is not necessarily where it processes data. Our own application servers and primary database run in Singapore.
| Purpose | Provider | Category | Duration |
|---|---|---|---|
| Distinguishes legitimate users from bots (bot management) | Cloudflare | Essential | 30 minutes |
| Verifies your client passed a Cloudflare security check | Cloudflare | Essential | 30 days |
| Bot protection during sign-up and sign-in | Cloudflare Turnstile | Essential | Session |
| Aggregate visit analytics | Google Analytics | Analytics | 2 years |
| Behavioral analytics for UX research | Microsoft Clarity | Analytics | 1 year |
| Aggregate visit analytics for Korean market | Naver Analytics | Analytics | Session |
| Meta ad attribution and retargeting | Meta | Marketing | 3 months |
| Google Ads conversion tracking and retargeting | Google Ads | Marketing | 13 months |
| Personalized retargeting advertising | Criteo | Marketing | 13 months |
| TikTok ad attribution and retargeting | TikTok (Bytedance) | Marketing | 13 months |
| B2B campaign attribution and retargeting | Marketing | 1 year |
Google Analytics sets two cookies on marcomm.works: _ga and _ga_7HP9WX2M7Q. They keep a random visitor ID for up to 2 years, so a visit that moves between marcomm.works, app.marcomm.works and account.marcomm.works counts as one. Google Analytics is not loaded until you allow Analytics, so before that nothing is sent to Google and no cookie is set. If your browser sends Global Privacy Control, it stays off even after you allow Analytics. If you later turn Analytics off, we stop sending data and delete these cookies. We never send your name, email address or account ID to Google Analytics, and pages our customers publish through Marcomm AI do not load it.
Third-party processors
Below is the list of service providers we use, where they are located, and the legal basis for any international data transfers.
Infrastructure & operations
Vercel
Hosting and edge network
- Company
- Vercel Inc.
- Corporate location
- United States
Cloudflare
CDN, DDoS protection, bot management (Turnstile), and R2 file storage
- Company
- Cloudflare, Inc.
- Corporate location
- United States
Google OAuth
Social sign-in
- Company
- Google LLC
- Corporate location
- United States
Neon
Managed Postgres database
- Company
- Neon Inc.
- Corporate location
- United States
Resend
Transactional email delivery (verification, sign-in codes)
- Company
- Resend Inc.
- Corporate location
- United States
Sentry
Error tracking and performance monitoring
- Company
- Functional Software, Inc.
- Corporate location
- United States
OpenAI
AI drafting and analysis. The text you submit is sent to it
- Company
- OpenAI, L.L.C.
- Corporate location
- United States
Upstash
Rate limiting. Stores the IP address and account identifier as keys
- Company
- Upstash, Inc.
- Corporate location
- United States
Payment
Polar
Payment processing / subscriptions
- Company
- Polar Software, Inc.
- Corporate location
- United States
Analytics
Google Analytics
Traffic analytics & service improvement
- Company
- Google LLC
- Corporate location
- United States
Microsoft Clarity
Session replay · heatmaps
- Company
- Microsoft Corporation
- Corporate location
- United States
NAVER Analytics
Analytics for Korean market
- Company
- NAVER Corp.
- Corporate location
- Republic of Korea
Advertising
Meta
Facebook & Instagram ads / Pixel
- Company
- Meta Platforms Ireland Ltd. / Meta Platforms, Inc.
- Corporate location
- Ireland / United States
Google Ads
Search & display ads / conversion tracking
- Company
- Google LLC
- Corporate location
- United States
Criteo
Retargeting advertising
- Company
- Criteo S.A.
- Corporate location
- France
TikTok (Bytedance)
TikTok ads / Pixel
- Company
- TikTok Technology Ltd. / TikTok Pte. Ltd.
- Corporate location
- Ireland / Singapore
LinkedIn Insight Tag
B2B retargeting / conversion tracking
- Company
- LinkedIn Ireland Unlimited Company (Microsoft)
- Corporate location
- Ireland
How to manage cookies
You have two ways to control cookies on Marcomm AI. You can open our to turn categories on or off at any time, or you can configure your allaboutcookies.org to block or delete cookies globally.
Manage cookies on Marcomm AI
Open the cookie management panel to adjust each category. Your choices are saved for 12 months.
Withdrawing your consent
Consent is not permanent. You can withdraw it at any time from the cookie management panel, and we will immediately stop using non-essential cookies on your next request. Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.
Your data subject rights
Depending on your jurisdiction, you have the following rights in relation to personal data collected through cookies:
- Right of access: Request a copy of the personal data we hold about you.
- Right to rectification: Request correction of inaccurate or incomplete data.
- Right to erasure: Request deletion of your personal data ("right to be forgotten").
- Right to restriction: Request that we limit the processing of your data.
- Right to data portability: Request your data in a structured, machine-readable format.
- Right to object: Object to processing based on legitimate interests or direct marketing.
- Right to lodge a complaint: File a complaint with your local data protection supervisory authority.
Regional notices
The following regional regulations may grant additional rights depending on where you reside:
European Economic Area
GDPR / ePrivacy Directive
GDPR and the ePrivacy Directive require prior consent for non-essential cookies. You can contact your national Data Protection Authority to lodge complaints.
United Kingdom
UK GDPR / PECR
UK GDPR and PECR apply. The Information Commissioner's Office (ICO) is your supervisory authority.
California, USA
CCPA / CPRA
CCPA/CPRA give you the right to know, delete, correct, and opt out of the sale or sharing of personal information. Marcomm AI does not sell personal data.
Republic of Korea
PIPA
PIPA applies. You have rights to access, correct, delete, and suspend processing of your personal information. The Personal Information Protection Commission (PIPC) is the supervisory authority.
Japan
APPI
APPI applies. You may request disclosure, correction, and cessation of use of your personal data.
Singapore
PDPA
PDPA applies. You may withdraw consent and request access or correction of your personal data.
Children's privacy
Marcomm AI is not intended for individuals under 16 (or the applicable minimum age in your jurisdiction). We do not knowingly collect personal data from children. If you believe a child has provided personal data to us, please contact us at privacy@marcomm.works.
Governing Law
This Cookie Policy shall be governed by and construed in accordance with the laws of the Republic of Korea. Any dispute arising out of or in connection with this policy shall be subject to the exclusive jurisdiction of the Seoul Central District Court (서울중앙지방법원), Republic of Korea, as the court of first instance.
Language Priority
This Cookie Policy may be provided in multiple languages for your convenience. In the event of any conflict, discrepancy, or inconsistency between the Korean-language version and any other language version, the Korean-language version shall prevail and take precedence.
Changes to this policy
We may update this Cookie Policy as our product evolves or as regulations change. Material changes will be communicated through the app or by email at least 30 days before they take effect. The "Last updated" date at the top of this page reflects the most recent revision.
Contact
Questions about this Cookie Policy or our cookie practices? Reach us at privacy@marcomm.works.
- Data controller
- Digitalog Technologies Inc.
- Privacy contact
- privacy@marcomm.works
- Address
- London, UK · Seoul, Korea