Cookie Policy
The cookies and local storage Aiora Labs uses, what each is for, how long it lasts, and how to decline the ones that are not essential.
Updated July 2026
This policy explains the cookies and similar browser storage (local storage, session storage) that Aiora Labs uses, and how to control the parts that are not strictly necessary. It should be read alongside the Privacy Policy, which explains what we do with the data those technologies help collect.
What a cookie is
A cookie is a small file a site stores in your browser so it can recognise your session on the next request. We also use related browser storage (local storage and session storage) for the same purposes. Throughout this policy “cookie” covers all three unless we say otherwise.
The categories we use
We group storage into three categories. Only the first is strictly necessary; the other two are optional and can be declined without breaking the product.
- Strictly necessary: sign-in, session security and core preferences. The platform cannot function without these, so they are not subject to consent.
- Analytics: aggregate, privacy-respecting usage measurement that tells us which surfaces are used and where they fail.
- Preference: remembers non-essential choices such as reduced motion and theme so you do not have to set them again.
The cookies we set
This register lists the storage Aiora Labs uses directly. Exact lifetimes are set by the relevant provider and may change; where that is the case the type is marked accordingly.
| Name / group | Category | Purpose | Type |
|---|---|---|---|
| Session / auth | Strictly necessary | Keeps you signed in between requests; issued and managed by our authentication provider | Session + persistent |
| CSRF / security | Strictly necessary | Protects requests against cross-site request forgery | Session |
| Preferences | Preference | Remembers reduced-motion, theme and similar UI choices | Persistent |
| Consent | Strictly necessary | Records your cookie choices so we do not ask every visit | Persistent |
| Analytics | Analytics | Aggregate usage measurement; set only if you allow analytics | Persistent |
Third-party cookies
Some strictly-necessary cookies are set by the providers that run parts of the platform on our behalf: our authentication provider (to keep you signed in) and our payment processor (only on the checkout and billing surfaces, to complete a payment safely). These are set for those specific functions and are governed by the Privacy Policy’s processor terms. We do not run advertising or cross-site tracking cookies from third parties.
What we do not use
No advertising cookies. No cross-site or cross-device tracking. No sale of behavioural data. No fingerprinting to follow you around the web. We are not in that business, and the analytics we do run is aggregate.
Managing your choices
You can accept or decline the optional categories from the consent control, and change your mind at any time. You can also clear or block cookies in your browser settings, though blocking strictly-necessary cookies will stop you signing in.
We honour a browser “Global Privacy Control” / “Do Not Track” signal where your browser sends one, treating it as a request to decline non-essential storage.
Changes
As the product develops, the storage it uses can change. Material changes to this register are published with a new “last updated” date.