COOKIE AND LOCAL STORAGE POLICY
Last updated: November 13, 2026

1. SUMMARY
Ciberkit does not use advertising, tracking or third-party analytics cookies. We only use the technical cookies strictly needed to sign in, and your browser's local storage to remember your preferences.

2. TECHNICAL (NECESSARY) COOKIES
Only created if you sign in:
- authjs.session-token (or __Secure-authjs.session-token): keeps you signed in. Duration: up to 30 days.
- authjs.csrf-token (or __Host-authjs.csrf-token): protects forms against CSRF attacks. Duration: session.
- authjs.callback-url (or __Secure-authjs.callback-url): remembers which page to return to after signing in. Duration: session.
- NEXT_LOCALE: remembers the chosen language. Duration: up to 1 year.
As they are strictly necessary for the service you request, they do not require consent.

3. LOCAL STORAGE
Stored only in your browser, never sent to our servers:
- ciberkit.preferences: light, dark or system theme.
- ciberkit.library: favorite and recently used tools.
- ciberkit.usage: daily usage counter of the Free plan's limited tools.
- ciberkit.report-brand: branding for PDF reports (company, color, logo), only if you set it up.

4. THIRD PARTIES
If you choose "Continue with Google" or pay for PRO, Google and Lemon Squeezy may use their own cookies on their pages. See their policies.

5. HOW TO DELETE THEM
You can delete cookies and local storage from your browser settings. Deleting cookies signs you out; deleting local storage removes your preferences and favorites.

6. CHANGES
If advertising or analytics are ever added, this policy will be updated with its date and your consent will be requested before any non-essential cookie is set.