Cookies & browser storage
The application has no advertising or behavioural analytics code. It uses authentication/security cookies and small amounts of browser storage for the requested interface and drafts.
Public information pages
These legal pages have no JavaScript, external fonts, embedded media, analytics pixels or browser-storage code. The app route does not set cookies here. Infrastructure may still process normal request/security metadata. Cloudflare security and sign-in services apply their own documented controls when used.
Authentication and security
Clerk provides sign-in on hub.evopien.com. Its necessary authentication cookies, including __session, support the signed-in session, session renewal and security. Actual cookie expiry depends on the provider settings and session lifecycle; it is not the same as the lifetime of a refreshed session token.
Cloudflare Access continues to provide sign-in on the older personal-ai-manager-evopien.lingering-salad-ba00.workers.dev address. Depending on that sign-in flow and deployed settings, its documented cookies can include:
| Name | Purpose | Duration |
|---|---|---|
CF_Authorization | Verified sign-in on the app/team domain | App session configured for 24 hours; policy/global settings can affect the actual expiry |
CF_AppSession | Application CSRF protection | 24 hours |
CF_Session | Team sign-in CSRF protection | 4 hours |
CF_Device | One-time-code/MFA abuse prevention | 30 days |
This is a source/documentation inventory, not a claim that every cookie is installed in every browser. See Cloudflare’s current Access cookie reference and Clerk’s privacy information. Clearing or blocking necessary authentication cookies can sign you out or prevent private-app access.
Local and session storage
| Storage | Purpose | Duration |
|---|---|---|
evopien-theme (local storage) | Your light/dark/device appearance preference | Until changed or browser site data is cleared; no app expiry |
evopien-language (local storage) | Your English/Spanish interface language; not translation of saved content | Until changed or browser site data is cleared; no app expiry |
Actor-scoped evopien-unsent-command:, evopien-goal-prompt: and goal-plan draft keys (session storage) | Keep your entered prompt or reviewed goal draft while navigating | Browser tab/session; removed when the relevant action clears it. Browser session restoration can preserve it |
evopien-invitation: (session storage) | Keep your private invitation code between the eligibility check and Cloudflare verification | Browser session; its seven-day browser limit is checked when loaded, and acceptance or clearing removes it. The server invitation can expire earlier |
evopien-mail-result (session storage) | Show a connection-result message after navigation | Removed after it is read; otherwise browser session |
evopien-first-use:<account>, evopien-welcome-seen (local) | Account-scoped first-use progress (task identifier only) and legacy welcome preference | Until cleared or changed; no automatic browser age expiry |
evopien-private-draft:<account>:<scope>, evopien-draft-actor (local storage) | Recover unsent text for the current account and prevent another account inheriting it | Recovery expires after 7 days from its last save; removed when read after expiry or cleared on save, discard, account change or device-draft clearing. Sign-out attempts clearing |
Drafts can contain personal content and are stored in your browser, separately from confirmed server records. Clearing site data can discard unsaved work. Do not use a shared browser profile for private drafts.
Non-essential storage and choices
No optional analytics, advertising or profiling storage is enabled by this application. There is no “accept all” banner to activate such features. Appearance, language and draft storage support the interface and actions you request; necessary sign-in/security storage cannot be rejected while retaining that function.
If non-essential tracking is added, it must remain off until a valid choice, with equally accessible accept and reject controls and withdrawal. Continuing to browse or reading this page is not consent. See the AEPD cookie guidance.
You can clear this site’s cookies/storage in browser settings, choose a new appearance in the app, or close the relevant draft/tab. External providers’ own sites and clients have separate policies.