Cookie and Local Storage Policy
Last updated: 20 August 2026
This notice is for visitors and customers in the United Kingdom, the EEA, and the United States. It sits next to the Privacy Policy. UK PECR and the EU ePrivacy rules require us to tell you what we store on your device. California and other US states require a clear description of tracking technologies.
What we use today
The product is a signed-in web app. We do not set third-party advertising cookies, Google Analytics, PostHog, session replay, or social pixels. We do not run a cookie-consent banner because we only store what is strictly necessary to keep you signed in and to remember layout preferences.
| Name / store | Type | Purpose | Duration |
|---|---|---|---|
| iam_web_session_token | localStorage (strictly necessary) | Keeps you signed in. Sent as a Bearer token, not an HttpOnly cookie | Until you sign out or the session TTL ends (default 72 hours on the server) |
| iam_web_session_user | localStorage (strictly necessary) | Caches name, email, plan so the chrome can render without an extra round trip | Cleared on sign-out |
| Chat UI flags (sidebar, key mode, draft, skills) | localStorage / sessionStorage (strictly necessary / functional) | Remembers layout and session so a refresh does not sign you out | Session or until you clear the site data |
| Stripe Checkout / Customer Portal | Third-party cookies on Stripe's domains | Payment. We do not read those cookies. See Stripe Privacy | Set by Stripe when you pay or manage a card |
UK and EEA (PECR / ePrivacy)
Strictly necessary storage does not require prior consent. Functional storage that only remembers your own UI choices on this site is treated the same way. If we later add analytics or advertising cookies, we will ask for consent first and will not set them on a UK/EEA visitor who refuses.
United States
We do not use cookies or pixels for cross-context behavioral advertising. Global Privacy Control and Do Not Track therefore have nothing extra to turn off today. Stripe may use cookies on its own checkout pages under its policy.
How to clear storage
Sign out, or clear this site's data in your browser settings. You will need to sign in again. Blocking all storage will break login.
Questions: privacy@iam-token.com.