Cookies & local storage

1. A small amount of necessary storage

This release uses essential authentication/security cookies and local storage for requested app functions. It does not install analytics, advertising pixels or cross-site marketing trackers. The cookie panel offers Essential only and a view of the categories; unavailable optional categories cannot be enabled. Continuing does not give blanket permission for future trackers.

Reopen Cookie settings from the page footer at any time. Your choice is stored on this browser for up to six months and expires sooner if the policy version changes. Clearing it shows the notice again. This preference is separate from email, location, AI and calendar consent.

2. Cookies in use

manicule_session: a first-party HttpOnly session cookie for authentication, with a maximum browser lifetime of seven days. It uses Secure in production and SameSite protections. Signing out clears it.

manicule_flow: a first-party HttpOnly security cookie for an OAuth sign-in or calendar connection, limited to the callback path, with a ten-minute lifetime. It binds the connection to the initiating browser and is cleared when the flow finishes.

A payment or connection provider may set cookies on its own website when you deliberately open that service. PayPal’s approval page and Google/Microsoft sign-in are governed by their respective notices. No payment iframe is loaded by this cookie panel.

3. Local storage, drafts and preferences

IndexedDB and other browser/device storage keep offline captures, notebook edits, queued sync operations and drafts needed for the functions you request. Local preferences remember your chosen workspace ambience, language or view controls. A service worker may cache the app shell so it can open offline.

The cookie choice itself is stored under manicule-privacy-choice-v1, containing only the policy version, timestamp and essential-only choice. It is not an advertising identifier. Other app records remain until synchronized, cleared by the app, signed out as described by the app, or removed by the browser/device.

Clearing all cookies or website data can sign you out and permanently remove unsynced drafts. Sync and export important work first. Rejecting optional tracking never clears your drafts, session or saved notes.

4. Future optional tools and contact

If optional analytics or marketing tools are introduced, we will update this notice and ask for a specific choice before enabling them where required. No optional tool is activated by the current notice. Browser Do Not Track or Global Privacy Control signals do not trigger any tracking in this release.

For information about personal data, read the Privacy policy. Questions or requests: hello@manicule.me. Operator: MANICULE, United States. Effective 23 October 2026.