Last updated: 9 July 2026
This policy explains what AR Works (ar.works, operated by Qode LTD, company number 17259547) stores in your browser and why. The short version: we use one strictly-necessary cookie to keep you signed in, a few device-only preferences, and nothing else. There are no analytics, tracking, or advertising cookies anywhere on the site.
| Cookie | Purpose | Type | Lifetime |
|---|---|---|---|
arworks_rt | Keeps you signed in between visits (a refresh token). Set only after you sign in or register. It is httpOnly (JavaScript cannot read it) and sent only to our API. | Strictly necessary | 30 days |
That is the only cookie AR Works sets. If you never sign in, we set no cookies at all.
We also keep a few preferences in your browser's local storage. These stay on your device and are never sent to our servers:
| Key | Purpose |
|---|---|
arworks-theme | Your light/dark theme choice inside the app. |
arworks.editor.* | Editor workspace preferences: panel sizes and collapsed state, grid and target-ghost toggles, asset-folder collapse state, and per-project "hidden while editing" flags. |
arworks-cookie-consent | Remembers the choice you made in the cookie banner. |
The public AR viewer page (where you point your phone at a target image) sets no cookies and no local storage. It loads its open-source AR libraries from the jsDelivr CDN, which - like any web server - receives standard request data (your IP address and browser details) when serving those files. Your camera is processed entirely on your device and never recorded or uploaded - see the Privacy Policy.
When you subscribe to a paid plan you are redirected to a secure checkout page hosted by Stripe on its own domain. Stripe sets its own cookies there (for example for fraud prevention and session handling) under Stripe's cookie policy. The AR Works site itself does not load Stripe scripts or set Stripe cookies.
The cookie banner lets you accept or decline. Because our only cookie is strictly necessary for signing in and staying signed in, the site cannot be used without it - declining therefore blocks the site until you accept. You can also clear or block cookies in your browser settings at any time; deleting arworks_rt simply signs you out.
If we ever add new cookies or storage, we will update this page (and, where consent is required, ask for it first). Questions: privacy@ar.works. See also our Privacy Policy and Terms & Conditions.