Cookie Policy

1. Scope

This policy explains cookies and similar storage in Qynta’s website, web app and mobile app. It supplements the Privacy Policy at https://qynta.app/legal/privacy.

2. Website Authentication Cookies

Qynta currently sets necessary first-party authentication cookies: __Host-qynta_access lasts up to 15 minutes and __Host-qynta_refresh lasts up to 30 days, with renewal during use. They are Secure, HttpOnly and SameSite=Strict. Signing out clears these authentication cookies in that browser. The necessary __Host-qynta_device cookie remembers a random browser identifier for new-device security alerts for up to 90 days, renewed after successful sign-in or the password step of MFA sign-in. It is also Secure, HttpOnly and SameSite=Strict, remains after sign-out, and does not authenticate you or bypass MFA. Password resets and explicit session revocation forget server-side remembered devices, so a later sign-in may generate another alert. Deleting your account clears this browser marker. Clearing it can trigger another new-device alert. The server stores a keyed digest scoped to your account, removes expired device records, and retains encrypted security-notice details for up to 30 days. They support sign-in and account security, not advertising. The website does not currently set analytics or advertising cookies.

3. Browser Storage & Saved Drafts

Local storage remembers account-specific preferences, navigation, product-tour completion and notification/install controls for features you use. Composer drafts can include unfinished post, Quest, poll, event or message text and remain on this browser until cleared; drafts older than 30 days are no longer restored and are removed from this browser on a subsequent website visit. Onboarding selections can be kept in session storage. The necessary qynta.cookie-choice.v1 local-storage record remembers whether you allow optional browser diagnostics, the choice version and its save/expiry times for 180 days; it contains no account ID or unique visitor identifier. Browser storage may persist on a shared device after sign-out, so clear Qynta’s site data if you do not want it retained. Clearing site data also removes saved preferences, drafts and your cookie choice.

4. Mobile Storage, Analytics & Diagnostics

The native app stores authentication tokens and a random installation identifier for new-device security alerts in device storage, and uses local storage for app functionality. The installation identifier is a notification hint, cannot sign you in, remains after sign-out, and is retained until device storage is cleared; reinstall behavior depends on the operating system. Legacy app versions without this identifier may trigger an alert after each completed sign-in. It does not use browser cookies or third-party advertising trackers. Qynta’s first-party usage events and Sentry diagnostics can be collected without analytics cookies; these may contain account-linked activity or technical device/request information as described in the Privacy Policy. The website’s optional Sentry browser error and performance reporting now starts only after you accept optional diagnostics. The browser choice does not change native-app processing or server security and operational logging described in the Privacy Policy.

5. Controls & Changes

On your first visit, the website offers equally visible Reject optional and Accept optional buttons, plus Customize. Optional browser diagnostics are off until you actively accept; continued browsing or closing settings is not consent. Cookie settings in the website footer, sign-in page and web-app Settings lets you change or withdraw the choice at any time. Rejecting or withdrawing stops future optional browser reports; it does not undo processing already performed with consent. We ask again after 180 days, after you clear the choice or if the choice version changes. If browser storage is unavailable, your explicit choice applies only to the current visit. Blocking authentication cookies prevents normal sign-in, and blocking local storage can prevent saved preferences and drafts from working. Manage notification permissions separately in browser/device controls. New optional purposes require updated information and a fresh choice before collection. For privacy requests, contact privacy@qynta.app or visit https://qynta.app/privacy/request.

6. Optional Browser Diagnostics Provider

If you accept, Sentry receives technical browser error and performance reports so Qynta can diagnose and fix problems. These can include browser and device details, page addresses, request metadata, error stacks and timing information; default personal information is disabled and Qynta applies filters to reduce sensitive data. Reports may be processed outside the EEA. See the Privacy Policy for provider, international-processing and rights information; contact privacy@qynta.app for applicable destinations, safeguards and retention details. Rejecting optional diagnostics does not prevent you from using Qynta. The website does not set advertising cookies or sell or share data for cross-context behavioral advertising.