A short list
Cookie notice
My First Prompt, operated by Scale DM Ltd, uses a cookie needed to keep a signed-in account secure. With your permission, it also uses Google Analytics and, when enabled, Meta measurement technology to understand visits to public pages and broad product steps. Temporary browser-tab storage supports the checkout hand-off and consented campaign attribution described below.
Last updated: 2 September 2026
Strictly necessary
Secure sign-in session
- Cookie name
__Host-mfp_sessionin production;mfp_sessionin local development- Purpose
- Keeps you signed in and connects requests to your authenticated session.
- Duration
- Up to 30 days, or until you sign out or the session is otherwise ended.
- Access
- HTTP-only, which means browser scripts cannot read it. In production it is also Secure and uses
SameSite=Lax, which reduces when browsers send it in cross-site contexts without blocking every cross-site request.
Your analytics choice
The session cookie is strictly necessary to provide the sign-in and account features you request. It is not used for advertising or cross-site tracking.
Google Analytics and any enabled Meta campaign measurement stay off unless you select “Accept analytics”. If accepted, Google may set _ga and a property-specific _ga_* cookie for up to two years. Meta may set its own measurement cookies when its campaign tag is enabled. These technologies help us understand aggregated visits and broad product steps on public marketing pages.
We do not include prompt text, generated results, email addresses, account identifiers or account pages in the analytics event parameters we send. If you reject analytics, neither analytics tag is loaded by My First Prompt and the related measurement storage is cleared where this site can clear it. You can reopen “Cookie settings” at any time to change your choice.
Stripe, Link and other websites
When you choose checkout or open billing tools, you leave My First Prompt and visit pages hosted by Stripe or Link. They may use their own cookies to provide secure payments, prevent fraud and remember payment-session details. They control those cookies under their own notices.
Links to other AI tools or websites may also lead to services with their own cookie practices.
Browser-tab storage used at checkout
sessionStorage is browser storage, not a cookie. If you start sign-in and checkout from an unsaved result, My First Prompt stores a versioned hand-off containing the draft, result and requested next action in that browser tab so the action can resume afterwards.
The hand-off expires after 60 minutes and is cleared after the action resumes successfully. If you accept analytics, the same tab also stores a random journey identifier, approved campaign labels and an OpenAI advert click reference (oppref) when one is supplied with the visit, so actions can be attributed to the advert that brought you to the site. This does not contain your prompt, result or email address.
Browser sessionStorage usually clears when the tab closes. If you reject analytics, the campaign attribution is not retained in browser storage.
If sign-in is part of checkout, these limited campaign values may be carried temporarily in the sign-in page address so attribution survives a page refresh. They are removed from the address when you leave that step. The OpenAI click reference is not sent to Google Analytics or Meta.
We also use localStorage to remember whether you accepted or rejected optional analytics. This avoids asking on every visit. It contains only your choice and can be cleared through your browser settings.
Managing the session cookie
You can remove cookies using your browser settings, or use the sign-out button in your account. Blocking or deleting the session cookie will sign you out and may prevent account features from working.
Questions can be sent to hello@myfirstprompt.co.uk.