ModelStation Cookie Policy
Operator: ELVARON LIMITED, Registration No. 79402144, 14/F, China Building, 29 Queen's Road Central, Central, Hong Kong. Contact: support@modelstation.org
Version: 2.0 Effective date: from the date of publication on the website.
1. Purpose of the document
This Policy describes which cookies, browser local storage, and similar technologies ModelStation uses, why they are needed, and how consent is given and withdrawn. The document applies together with the Privacy Policy and forms part of the Terms of Use.
Legal framework: Directive 2002/58/EC (ePrivacy) and the national rules of EEA countries, PECR (United Kingdom), GDPR/UK GDPR in respect of personal data, PDPO (Cap. 486) of Hong Kong, CCPA/CPRA in respect of tracking.
2. Definitions
Cookie — a small text file that a website stores in the device’s browser. A session cookie is deleted when the browser is closed; a persistent cookie remains until expiry or manual deletion.
Local storage (localStorage) — a browser mechanism for storing data on the device without transmitting it to the server with every request. Technically this is not a cookie, but it is disclosed here for completeness.
First-party technologies are placed by the modelstation.org domain. Third-party technologies are placed by other domains.
3. Legal approach
3.1. Strictly necessary technologies are used on the basis of performance of a contract and a legitimate interest in ensuring security; consent is not required for them, and they cannot be refused without loss of operability of the Service.
3.2. Any optional technologies (analytics, performance measurement, marketing) are enabled only after express consent, where required by applicable law. Until consent is obtained, they are not set and do not read data.
3.3. Consent is voluntary, specific, informed, and withdrawable. Refusal does not impair access to the core functions of the Service.
4. List of technologies used
4.1 Strictly necessary
| Name | Type | Purpose | Duration |
|---|---|---|---|
modelstation_session | first-party cookie, httpOnly, SameSite=Lax, Secure | identification of an authenticated session, maintenance of login | 12 hours; 30 days if “remember me for 30 days” is selected |
| Technical cookies for form protection and request integrity | first-party, session | protection against cross-site request forgery and automated attacks | session |
| Preview-access cookies (Preview) | first-party | restriction of access to a closed version of the site | session or until expiry of the access granted |
| Network-protection and load-balancing cookies, if a protective proxy is used | third-party (protection provider) | filtering of malicious traffic, determination of request country, rate-limiting | from session to 12 months |
4.2 Local storage
| Key / category | Purpose | Duration |
|---|---|---|
modelstation-cookie-consent | storage of your decision on the cookie banner so that it does not reappear | until browser data are cleared |
| Interface settings | language, theme, state of panels and last-selected models | until browser data are cleared |
| Drafts and local workspace state | preservation of unfinished input and chat state on the device | until browser data are cleared or you log out of the account |
4.3 Analytics and marketing
As of the date of this version, ModelStation does not use third-party analytics and advertising cookies, counters, pixels, or social-network trackers.
If such technologies are added, before they are enabled: (a) the Policy will be updated with the provider, purpose, duration, and data transferred; (b) a separate category will appear in the banner with the ability to consent or refuse; (c) until consent is obtained, the technologies will not be activated.
5. Consent management
5.1. On the first visit, a banner is displayed with a choice: accept optional technologies or refuse them. The decision is stored on the device.
5.2. You may withdraw or change the decision by: clearing the site data in the browser (after which the banner will appear again) or contacting support@modelstation.org.
5.3. Refusal of optional technologies does not disable strictly necessary cookies, because without them login, a secure session, and protection against attacks are impossible.
6. Management through the browser and device
6.1. You may view, delete, and block cookies in the browser settings, and also use private-browsing mode.
6.2. Consequences: deletion of authentication cookies results in logout from the account; blocking of strictly necessary cookies makes login, chat, and payment unavailable; clearing local storage deletes interface settings and local drafts.
6.3. Browser signals such as Do Not Track and Global Privacy Control are processed to the extent applicable to the technologies used. Because third-party analytics and advertising are not used, additional tracking opt-out is not required.
7. Data obtained through these technologies
Through the listed technologies the following may be processed: session identifier, IP address, country code, browser and device type, time of access, the fact of consent, interface preferences. Purposes, legal bases, and periods are described in the Privacy Policy; disclosure to providers is set out in the “Sub-processors” list.
8. Changes to the Policy
The Policy is updated when the composition of technologies changes. The number of the current version is indicated in the heading; the date it takes effect is indicated on the document page on the website. Material changes requiring consent are introduced no earlier than such consent is obtained.
9. Contacts
Questions regarding cookies: support@modelstation.org ELVARON LIMITED, 14/F, China Building, 29 Queen's Road Central, Central, Hong Kong.