Legal
Cookies & Local Storage
Effective 2026-04-18
Our approach
Nisatsu uses only cookies and browser storage that are strictly necessary to deliver the Service you signed up for. We do not run advertising cookies, cross-site trackers, or third-party analytics pixels. There is no cookie banner because we do not set non-essential cookies.
What we store
- nisatsu_session (cookie, HttpOnly, Secure, SameSite=Lax) — keeps you signed in. Expires after 30 days or when you sign out.
- nisatsu_theme (localStorage) — remembers your light/dark/system preference so the UI doesn't flash on first paint.
- nisatsu_last_auth (localStorage) — remembers whether you last signed in via email, phone, or OAuth so the sign-in form opens to the right tab.
On mobile, the corresponding session token is stored in your device's secure keychain (iOS Keychain / Android Keystore) via Expo SecureStore. It is not an HTTP cookie.
Third-party storage
Stripe's checkout page and the Stytch sign-in flow may set their own cookies on their domains when you interact with them. Those cookies are governed by Stripe's and Stytch's privacy notices respectively.
Controlling storage
You can clear Nisatsu's cookies and local storage at any time via your browser settings. Clearing the session cookie will sign you out.
More
See our Privacy Policy for the full picture of what data we collect and who we share it with.