Cookie Notice

1. The short answer

Arcavelo uses only the cookies it needs to sign you in securely and to show your planner correctly, such as in your time zone. It uses no advertising cookies, no analytics cookies, and no third-party tracking of any kind. Because every cookie it sets is strictly necessary, there is no cookie banner to click through.

2. Cookies Arcavelo sets

• Session cookie (for example authjs.session-token). Keeps you signed in. It is marked HttpOnly and Secure, so page scripts cannot read it and it is only sent over HTTPS. It is removed when you sign out or when your session expires.
• Sign-in security cookies (for example authjs.csrf-token, authjs.callback-url, authjs.state, and authjs.pkce.code_verifier). Protect the Google sign-in process against forgery. Most last only minutes, for the length of the sign-in, and none are used for anything else.
• Time zone (client-tz). Stores your device’s time zone name, such as “America/Chicago,” so due dates and schedules show at the right local time. Lasts one year.
• Assignments view (arcavelo-assignments-view). Remembers how you last chose to view the Assignments page, so it opens the same way next time. Lasts one year and is cleared when you delete your account.

On secure connections these names may carry a __Secure- or __Host- prefix.

3. Storage in your browser

Arcavelo also saves a few settings in your browser’s local storage. These never leave your device and are never sent to our servers:

• your theme, accent colour, light or dark mode, and visual style; and
• the Study Timer’s current state and settings.

They are cleared automatically when you delete your account from that browser, and you can clear them at any time in your browser settings.

4. Other services

When you sign in, you are sent to Google’s sign-in page, and when you pay, to Stripe’s checkout page. Those pages are run by Google and Stripe and set their own cookies under their own policies. Arcavelo has no control over those cookies and does not receive them.

5. Your choices

You can block or delete cookies in your browser settings. If you block Arcavelo’s cookies, you will not be able to sign in, because the session cookie is how the app knows it is you. Browser signals like Do Not Track and Global Privacy Control need no action from us, because the app does no tracking to turn off.

6. Changes and questions

If Arcavelo ever adds a cookie that is not strictly necessary, we will update this notice first and ask for your consent where the law requires it. Questions can be sent to support@arcavelo.app. More on how we handle your information is in the Privacy Policy.