Cookie policy

1. Essential session cookie

The codlyra_session cookie identifies your authenticated session. It contains a random token, not your password or API key. It is HTTP-only, uses SameSite=Lax, and is marked Secure on HTTPS. Sessions expire after 30 days unless you sign out or revoke them earlier.

This cookie is necessary to operate the account service. Blocking it prevents sign-in and access to private projects.

2. Temporary browser storage

We use browser session storage to carry an initial project prompt and model choice from the public homepage into your workspace, and to preserve limited workflow preferences during a tab session. This is not advertising tracking and is not shared with third parties.

You can clear this information through your browser controls. Clearing session storage may remove an unsent draft or temporary choice, but does not delete server-side projects.

3. Infrastructure and payment providers

Cloudflare may set security or traffic-management cookies as part of delivering and protecting the website. When you open Stripe-hosted checkout or the billing portal, Stripe may use its own essential fraud-prevention and payment cookies under its policies.

We do not embed advertising pixels, install behavioral analytics, or use cookies to sell or share personal information for targeted advertising.

4. Your controls

Your browser lets you inspect, block, and delete cookies and local storage. You can also sign out to remove the current session cookie. Password changes revoke existing sessions.

Because Codlyra itself currently uses only essential session storage and no optional analytics or marketing cookies, no optional-cookie consent banner is shown. If optional tracking is introduced, this policy and consent controls will be updated where required.

5. Questions

For questions about cookies or other personal information, use the Contact page and select “Privacy or data request.” See the Privacy policy for more about data processing and your rights.