Cookie Policy

Cookie & Local Storage Policy

Pynokio uses essential cookies and modern browser storage technologies to maintain secure authenticated sessions, persist user interface theme preferences, and track active generation jobs.

1. Strictly Necessary Cookies

• pynokio_rt (or the operator-configured equivalent): HttpOnly refresh session, normally up to 30 days.
• pynokio_at: HttpOnly access session, approximately 20 minutes.
• pynokio_oauth_state and pynokio_oauth_verifier: short-lived OAuth security values, approximately 10 minutes.
• pyn_did: HttpOnly device identifier used to prevent abuse of free credits through multiple accounts, up to 400 days. The same identifier is kept in local storage (pynokio.did) and IndexedDB (pynokio). See the Privacy Policy, section 2.

These cookies are used for authentication and request security, not advertising. They are Secure and SameSite-protected in production.

2. Preference & Performance Storage

Local storage includes pynokio-theme, a limited cached user display object, unsent Studio drafts/last project identifiers and local Audio Tools history. Access tokens are not persisted in local or session storage. Local data remains on the device until cleared and can be removed in browser settings.

3. Third-Party Tracking

The audited build does not set third-party advertising cookies. Optional analytics or marketing must remain disabled until a consent mechanism is implemented and this notice is updated with vendor, purpose, duration and withdrawal controls.