Cookies & Local Storage

Essential cookies (always on)

Essential cookies are used for authentication, security and core product functionality. They are always on and cannot be switched off in Cookie Settings, because signing in and using Nodren depend on them.

Authentication: Supabase authentication uses cookies to maintain and refresh signed-in sessions, and short-lived sign-in security cookies protect the Google, Microsoft or email sign-in round trip. Nodren’s server verifies identity for protected requests.

Sign-in agreement: when you tick the agreement before choosing a sign-in method, an HttpOnly, signed cookie carries that choice through sign-in for up to one hour. It records the legal document version you agreed to, when you agreed and where to return; during email signup it is also bound to your email address and new account ID so the agreement is recorded for the right account. It is cleared once sign-in completes.

Signup reminder: an HttpOnly, same-site navigation cookie can remind the browser to complete authenticated policy acknowledgement after email confirmation. It contains only a navigation flag, not your identity or acceptance evidence, expires after 7 days and is cleared when acknowledgement succeeds.

Cookie preferences: a first-party cookie remembers your Cookie Settings choice — the categories you allowed, when you chose and the version of this page you chose under. It lasts up to 180 days.

Blocking or deleting essential cookies may sign you out or prevent account access. This page does not read, reveal or clear your cookies.

Analytics and marketing (optional)

Analytics would help Nodren understand how the product is used; marketing would measure Nodren’s own marketing. Both categories are optional and stay off unless you allow them.

Nodren does not currently run any analytics scripts or analytics cookies, and does not currently run any marketing scripts or marketing cookies. No advertising pixels or session replay were found in the current audited product.

If an analytics or marketing tool is introduced, it can start only for people who have allowed its category, and it should be reviewed and disclosed on this page before introduction. This is a description of current behavior, not a promise that third-party infrastructure never changes.

Edge delivery and measurement

Cloudflare analytics/performance measurement is currently present at the edge; hosting/edge services also process request metadata for delivery, reliability and security. This edge processing adds no scripts to Nodren pages and is not controlled by Cookie Settings.

Account-scoped local Studio data

Studio uses browser-local storage for account-scoped prompts, references/upload URL history, local generation history, settings and drafts. Session storage holds convenience state such as account-return navigation and supported agent drafts. The product isolates these under the authenticated account and invalidates mounted private state on account changes.

Signing out does not physically delete all browser-local records. Signing back into the same account can recover intended scoped drafts. Old unscoped private caches are not silently imported into another account. Local storage is not encrypted protection against someone inspecting the same browser profile.

Non-content preferences such as sidebar collapse and announcement dismissal can remain browser-global.

Cookie Settings

Inside Nodren, after you sign in, a Cookie settings card lets you Accept all cookies, Reject non-essential cookies, or open Cookie preferences to turn Analytics and Marketing on or off individually. Essential cookies are always on.

You can reopen Cookie preferences at any time inside Nodren, from the account menu in Studio or from your Account page. Nodren asks again after 180 days or when this page’s version changes. Turning off a category you had allowed reloads the page so that anything started under it stops.

Your browser may also provide cookie/site-storage controls, but blocking or clearing cookies can affect sign-in and remove local drafts. Privacy requests can be sent through Help. Browser privacy settings are not a promise that Nodren or every infrastructure service recognizes a particular consent or opt-out signal.