Cookie Policy

This page lists every cookie and browser-storage item CrawlWithAI sets on Shopify storefronts running the app and on crawlwithai.com. If a cookie is not on this page, we do not set it.

Questions: support@crawlwithai.com. Broader privacy story: see the Privacy Policy.

When the CrawlWithAI app is installed on a Shopify store, the following cookie may be set in shoppers' browsers. It is first-party (set on the merchant's own domain) and strictly necessary to operate the AI Network proxy endpoint that delivers the catalog response.

If the merchant has separately configured analytics, advertising, or social-media cookies on their storefront (their own GA4, Meta Pixel, etc.), those are governed by the merchant's own cookie banner and configuration. CrawlWithAI does not control or set those cookies on the merchant's behalf.

The Sales AI widget uses the browser's sessionStorage (not cookies) to remember an in-progress conversation across page loads. That data lives in the shopper's browser only, is never sent to us beyond the messages they send, and clears when the browser tab closes.

When a shopper adds a product to cart through the Sales AI widget, a line-item property called _cwai_sid is attached to the cart. It is a Shopify cart attribute, not a cookie, and is visible to the merchant in the Shopify admin and on order exports. We use it on order completion to confirm the order came from the widget.

The marketing site is informational. It does not set tracking, advertising, or analytics cookies. The only cookies that may appear are short-lived functional cookies set by the hosting platform (Vercel) for routing. They contain no personal data and are deleted when the browser closes.

When a merchant uses the CrawlWithAI admin UI inside Shopify, the embedded app inherits Shopify's own session cookies. We do not set additional cookies in the admin. Shopify's session-token mechanism authenticates our API calls and lives in memory rather than in cookies.

CrawlWithAI does not embed third-party tracking pixels, ad networks, or analytics SDKs on the marketing site or on merchant storefronts. The sub-processors listed in the Privacy Policy (Anthropic, Voyage AI, Google GA4 when connected, Microsoft IndexNow) are server-to-server APIs and set no cookies in shoppers' browsers.

If the merchant has separately connected GA4 to their storefront, GA4's own cookies (_ga, _ga_*, etc.) may be present. Those are governed by the merchant's GA4 configuration and Google's policies, not by us.

• Block cookies for the merchant's domain in your browser. The _cwai_proxy_sid cookie will not be set; attribution may still work via referer + hashed IP, but with lower confidence.
• Use private or incognito mode. Cookies and sessionStorage are wiped when the tab closes.
• Send a Global Privacy Control (GPC) signal via your browser. We honour GPC: when received, we treat the visitor as opted out of attribution tracking for that session.
• Email us at support@crawlwithai.com to request deletion of any data we hold under the Privacy Policy.

If we add or remove a cookie, we update this list and change the effective date at the top. For material changes that affect merchant storefronts, we notify active merchants by email at least 14 days in advance.