← All legal & policies
Legal

Cookie Policy

Effective 2026-08-04

Draft for legal review — bracketed placeholders are pending counsel finalisation. Not legal advice.

We use cookies and similar technologies. Strictly-necessary cookies (login, security, load-balancing) are always active. Functional, analytics and preference cookies are used only with your consent, collected via our consent banner; you can withdraw consent as easily as you gave it via Cookie settings.

We do not use advertising cookies, and we set no third-party tracking cookies by default. The banner blocks non-essential cookies until you opt in (no pre-ticked boxes).

Cookies we set today:

  • `frutebox_session` — strictly necessary. Keeps you signed in and secures the session. First-party; cleared when you sign out or it expires.
  • `frutebox_login` — strictly necessary. Holds a short-lived, one-time token only while you are completing sign-in (between your password and your two-factor code); cleared as soon as sign-in finishes.
  • `frutebox_oauth_state` — strictly necessary. A short-lived anti-forgery value used only while you sign in with an external provider; cleared when that sign-in completes.
  • `STEVAI_APP_LOCALE` — functional. Remembers your language preference. First-party; persists until you change it.
  • `frutebox_consent` — strictly necessary. Stores your banner choice so we don't ask again; first-party, readable only by Frutebox.
  • `stevai_consent` — strictly necessary, and the same thing under our former name. If you visited before the rename you still hold this one; we read it so your existing choice is honoured rather than asking you again, and it is replaced by the name above when you next change your preferences.

If we later add optional analytics or preference cookies, we will list each one's provider, purpose and duration here, and they will remain off until you opt in via the banner.