Legal
Cookies Policy
This page is a draft placeholder, not a finished legal document. It describes how Aperisol actually uses cookies today, but it hasn't been reviewed by a lawyer yet. A complete policy will replace this before general availability.
What we use
Aperisol sets exactly two cookies, both strictly necessary to keep you signed in: an access token cookie (expires after 15 minutes) and a refresh token cookie (expires after 30 days). Both are httpOnly and SameSite=Lax, so they can't be read by page scripts and aren't sent on cross-site requests.
What we don't use
No analytics cookies, no advertising or retargeting pixels, and no third-party tracking scripts run on Aperisol today. Because the only cookies we set are strictly necessary for you to log in and stay logged in, we don't show a cookie consent banner — there's nothing non-essential to ask permission for. If that changes, this page and that decision will change with it.
Controlling cookies
You can block or delete these cookies in your browser settings at any time, but doing so will sign you out and prevent Aperisol from keeping you signed in.
Questions
Reach out to hello@aperisol.com with any questions before this policy is finalized.