What's a cookie?
A cookie is a small piece of data that your browser stores on your device and sends back to the site that set it. Sites use cookies for things like keeping you logged in, remembering preferences, or tracking you across pages. nolyo only uses cookies for the first one.
Cookies we set
| Name | Purpose | Lifetime | Type |
|---|---|---|---|
nolyo_session |
Keeps you signed in after you log in. Contains a signed reference to your user ID and an expiry; the server checks the signature on every request. | Up to 30 days, or until you sign out. | Essential |
The session cookie is set with HttpOnly (not readable by
JavaScript) and SameSite=Lax, and on production it is also
marked Secure so it only travels over HTTPS.
CSRF protection on web forms uses a token derived from your session; no separate cookie is set for it.
Cookies we do not set
- No analytics cookies (Google Analytics, Plausible, etc.).
- No advertising or retargeting cookies.
- No social-media share cookies.
- No "preference" cookies — UI mode follows your operating system via
prefers-color-scheme, not a stored choice.
Third-party cookies
Pages on nolyo.net and app.nolyo.net do not
load third-party scripts and therefore do not set third-party cookies.
Two exceptions, only triggered when you choose to use them:
-
Lemon Squeezy checkout — when you click "Get Pro" or
"Get Team", you are taken to a checkout page on
checkout.lemonsqueezy.com. Lemon Squeezy sets its own cookies to run the checkout and detect fraud. See their privacy notice. - Outbound links — links from this site to other sites (for example, the Model Context Protocol documentation) are normal web links; once you click through, the other site's cookie policy applies, not ours.
Do you need to ask for consent?
Under the ePrivacy Directive and equivalent rules, consent is not
required for cookies that are strictly necessary to provide
the service the user asked for. The nolyo_session cookie
is strictly necessary — without it we cannot keep you logged in — so
we do not show a consent banner.
If we ever add non-essential cookies, we will ask first and we will not set them until you opt in.
Turning cookies off
You can clear or block cookies in your browser settings at any time. If you block the session cookie, you will not be able to stay signed in — the rest of the marketing site (landing page, pricing, these legal pages) will still work.
Changes
If we change which cookies we set, we will update this page and bump the "Last updated" date at the top.
Contact
Questions about cookies or the rest of this site: legal@nolyo.net.