Cookie and Local Storage Policy

1. Current technologies

• The refreshToken cookie is an essential, HTTP-only authentication cookie used to maintain a signed-in session. It is protected with Secure in production and expires with the session policy.
• The accessToken value is stored in browser local storage so the account client can authenticate API requests.
• Theme or interface preferences may be retained locally to provide a requested experience.

2. No optional tracking

The current codebase does not deploy advertising, profiling or optional analytics trackers. For that reason, Vorlaxen does not ask users to accept optional cookies that are not in use. If optional tracking is introduced, it will remain disabled until a valid choice is obtained where required.

3. Controls

You can clear site data through your browser. Blocking essential authentication storage may prevent sign-in or cause sessions to end. Signing out revokes the server session and removes applicable client credentials.