Cookie Policy

1.1Cookies are small files stored by the browser that make it possible, for example, to keep you signed in from one page to the next. Local storage (local storage, IndexedDB and the browser cache) works in a similar way, but its data is not sent to the server automatically.

2.1The platform does not work without these cookies. They do not require consent, as they are essential to provide the service you requested:

1. Session (next-auth.session-token): keeps you signed in. Encrypted; expires with the session or after the sign-in validity period.
2. Cross-site request forgery protection (next-auth.csrf-token): stops other sites from taking actions on your behalf. Lasts for the browser session.
3. Return address (next-auth.callback-url): remembers the page to return to after signing in. Lasts for the browser session.
4. Language (NEXT_LOCALE): stores the chosen language. Lasts 1 year.
5. Referral (when present): briefly stores the referral code used when signing up with Google, so the person who referred you is credited.

3.1We use the browser's local storage for:

1. Theme (light, dark or system) on the public pages.
2. Content saved for offline use and the queue of changes made without a connection, which are synced when the connection returns.
3. Application files kept by the service worker, so the app opens faster and without a connection.

3.2This data stays only on your device and is erased when you sign out.

4.1We use Vercel Web Analytics to count visits in aggregate. It does not use cookies, does not create persistent identifiers and does not follow you across sites.

5.1Setlyst does not use advertising cookies, does not show ads and does not share browsing data with ad networks.

6.1You can delete or block cookies in your browser settings. Blocking the strictly necessary cookies prevents signing in. Signing out erases the offline data Setlyst keeps on this device.

6.2Questions about cookies and privacy: support@setlyst.app.