Snaelda1. What cookies are
Cookies are small text files a website stores in your browser. We use a small number of first-party cookies — set by Snaelda's own domain, never embedded in someone else's site — to keep you signed in, protect requests against forgery, remember your choices, and, only with your consent, measure how our own pages are used.
2. Strictly necessary cookies
These cookies are required for the Service to function — signing in, keeping your session, and protecting requests. They do not require consent under EU rules, and blocking them will break login, editing, billing, and publishing.
| Name | Purpose | Lifetime | HttpOnly | Secure | SameSite |
|---|---|---|---|---|---|
snaelda_access_token | Authenticated session bearer token that keeps you signed in. | 15 minutes | Yes | Yes* | Lax |
snaelda_refresh_token | Renews your session so you are not signed out every 15 minutes. | 30 days | Yes | Yes* | Lax |
snaelda_guest_session | Binds an unclaimed trial session to your browser before you create an account. | Trial window | Yes | Yes* | Lax |
snaelda_csrf_token | Cross-site request forgery protection (double-submit token). Readable by our own scripts by design, so it is not HttpOnly. | Session | No | Yes* | Lax |
3. Consent and preference cookies
This cookie records a choice you made and is exempt from consent because it exists to honour your decision.
| Name | Purpose | Lifetime | HttpOnly | Secure | SameSite |
|---|---|---|---|---|---|
snaelda_consent | Remembers whether you accepted or declined analytics in the consent banner, so we honour it on later visits. | 180 days | No | Yes* | Lax |
4. Analytics cookies (consent-gated)
We use Google Analytics only on our own marketing and builder pages to understand how Snaelda is used. These cookies are set only after you accept analytics in the consent banner shown on your first visit — never before. If you decline, they are never set. We do not run analytics on published customer sites, so no analytics cookie is ever set when someone visits a site built with Snaelda.
| Name | Purpose | Lifetime | HttpOnly | Secure | SameSite |
|---|---|---|---|---|---|
_ga, _ga_* | Google Analytics visitor identifier used to measure aggregate usage of our own pages. | Up to 2 years | No | No | Lax |
Google is listed as a subprocessor in our Privacy Policy. You can withdraw analytics consent at any time by clearing the snaelda_consent cookie in your browser; the banner will ask again on your next visit.
5. Similar technologies (local storage)
A couple of purely functional preferences are stored in your browser's local storage rather than in cookies, so they are never transmitted to our servers: snaelda-color-mode (your light/dark choice) and your interface language preference. These are strictly functional and carry no tracking data.
6. * A note on the Secure attribute
Cookies marked "Yes*" carry the Secure attribute in every deployed environment, so they are only ever sent over HTTPS. The attribute is omitted solely on a developer's local machine, which runs over plain HTTP.
7. Managing cookies
You can block or delete cookies through your browser settings. Blocking strictly necessary cookies will stop login, billing, editing, publishing, and security features from working. Declining analytics has no effect on the Service.
8. Changes to this policy
We update this page whenever we add, remove, or change a cookie. The "Last updated" date at the top reflects the current version. For any question, email privacy@snaelda.io.