Draft for legal review. This page was drafted for the product team and must be reviewed by a qualified lawyer before launch. Text in purple brackets is a placeholder. Draft 0.1, 25 October 2026.
What we use
| Name | Type | Purpose | Duration |
|---|---|---|---|
| Session cookie | Essential cookie | Keeps you signed in securely (live service) | Until sign-out or 30 days |
| CSRF token | Essential cookie | Protects forms from cross-site attacks | Session |
| ay-theme, ay-text, ay-lite, ay-lang | Device storage | Remembers theme, text size, low-bandwidth mode and language | Until you clear them |
| ay-consent-cookies | Device storage | Remembers your cookie choices | 12 months |
| ay-state-v1 | Device storage | Offline copy of your plan and recent logs for fast loading and offline use | Until you sign out or delete your data |
Analytics
If you allow it, we count page visits with self-hosted, cookieless analytics. It does not use cookies or identify you, and never runs on screens that show health information.
What we don't use
No advertising cookies, cross-site tracking pixels or social media trackers.
Managing your choices
You can also clear cookies and site data in your browser settings. Clearing device storage signs you out and removes the offline copy of your plan from that device.