Cookies Policy
Last updated: November 18, 2025
1. What Are Cookies?
Cookies are small text files that are placed on your device when you visit our website. They help us provide you with a better experience by remembering your preferences and enabling certain functionality.
2. How We Use Cookies
2.1 Essential Cookies
These cookies are necessary for the website to function properly:
- Authentication Cookies (refreshToken):
- Type: HttpOnly cookie (not accessible via JavaScript)
- Purpose: Stores refresh token for secure session management
- Duration: 7 days
- Security: HttpOnly, Secure (in production), SameSite=Lax
- Why we need it: Enables automatic token refresh without requiring you to sign in repeatedly
- Session Cookies: Maintain your login session while browsing
2.2 Local Storage
We also use browser local storage (not cookies) to store:
- Access Token: Temporary authentication token (expires after a short period)
- User Data: Your profile information for faster page loads
- Redirect Paths: Temporary storage for post-authentication redirects
3. Third-Party Cookies
When you sign in using OAuth providers (Google, Twitter), they may set their own cookies. These are governed by their respective privacy policies:
- Google: Google Privacy Policy
- Twitter: Twitter Privacy Policy
4. Managing Cookies
You can control cookies through your browser settings:
- Chrome: Settings → Privacy and security → Cookies and other site data
- Firefox: Options → Privacy & Security → Cookies and Site Data
- Safari: Preferences → Privacy → Cookies and website data
- Edge: Settings → Privacy, search, and services → Cookies and site permissions
Note: Disabling essential cookies may prevent you from signing in or using certain features of our website.
5. Cookie Security
We take cookie security seriously:
- Authentication cookies are marked as HttpOnly, preventing JavaScript access
- In production, cookies are marked as Secure (HTTPS only)
- We use SameSite=Lax to protect against CSRF attacks
- Refresh tokens expire after 7 days and require re-authentication
- Access tokens stored in local storage expire quickly and are refreshed automatically
6. Changes to This Policy
We may update this Cookies Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.
7. Contact Us
If you have questions about our use of cookies, please contact us at our contact page.