Cookies Policy

Last updated: November 18, 2025

1. What Are Cookies?

Cookies are small text files that are placed on your device when you visit our website. They help us provide you with a better experience by remembering your preferences and enabling certain functionality.

2. How We Use Cookies

2.1 Essential Cookies

These cookies are necessary for the website to function properly:

  • Authentication Cookies (refreshToken):
    • Type: HttpOnly cookie (not accessible via JavaScript)
    • Purpose: Stores refresh token for secure session management
    • Duration: 7 days
    • Security: HttpOnly, Secure (in production), SameSite=Lax
    • Why we need it: Enables automatic token refresh without requiring you to sign in repeatedly
  • Session Cookies: Maintain your login session while browsing

2.2 Local Storage

We also use browser local storage (not cookies) to store:

  • Access Token: Temporary authentication token (expires after a short period)
  • User Data: Your profile information for faster page loads
  • Redirect Paths: Temporary storage for post-authentication redirects

3. Third-Party Cookies

When you sign in using OAuth providers (Google, Twitter), they may set their own cookies. These are governed by their respective privacy policies:

4. Managing Cookies

You can control cookies through your browser settings:

  • Chrome: Settings → Privacy and security → Cookies and other site data
  • Firefox: Options → Privacy & Security → Cookies and Site Data
  • Safari: Preferences → Privacy → Cookies and website data
  • Edge: Settings → Privacy, search, and services → Cookies and site permissions

Note: Disabling essential cookies may prevent you from signing in or using certain features of our website.

5. Cookie Security

We take cookie security seriously:

  • Authentication cookies are marked as HttpOnly, preventing JavaScript access
  • In production, cookies are marked as Secure (HTTPS only)
  • We use SameSite=Lax to protect against CSRF attacks
  • Refresh tokens expire after 7 days and require re-authentication
  • Access tokens stored in local storage expire quickly and are refreshed automatically

6. Changes to This Policy

We may update this Cookies Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.

7. Contact Us

If you have questions about our use of cookies, please contact us at our contact page.