Cookie and Tracking Policy

This policy explains the cookies and similar technologies Chomply uses, what each one is for, and how to control them. We keep this simple: we use the cookies needed to sign you in and keep the app working, a little local storage to remember your preferences, and first-party analytics to understand usage. We do not use advertising cookies. Some cookies are strictly necessary, and blocking those will stop you signing in.

What cookies are

Cookies are small text files that a website stores in your browser so it can recognise your browser on later requests. We also use similar technologies, such as your browser's local storage, which works the same way for the purposes of this policy.

Together they let the app keep you signed in, remember your choices and understand how the app is being used.

In plain terms: cookies and local storage are small bits of data your browser keeps so the app can remember things between clicks.

Strictly necessary cookies

These cookies are required for Chomply to function, in particular to sign you in and keep your session secure. They cannot be switched off without breaking sign-in.

Cookie Purpose Retention Session cookie Keeps you signed in and links your requests to your session Cleared when your session ends, typically on sign-out or after a period of inactivity CSRF token cookie Protects forms and actions against cross-site request forgery Lasts for the session Authentication / remember-me cookie Keeps you signed in between visits when you choose to be remembered Up to a limited number of weeks, then expires

In plain terms: these are the cookies that make signing in and staying signed in work, and the app cannot run without them.

Functional storage

We use your browser's local storage to remember preferences that make the app nicer to use.

Item Purpose Retention Theme selection Remembers your chosen light, dark or other theme Kept until you clear it or change it Sidebar collapse state Remembers whether your desktop sidebar is expanded or collapsed Kept until you clear it or change it

This information stays in your browser and is used only to restore your preferences.

In plain terms: this just remembers your look-and-feel choices, like your theme and whether the sidebar is collapsed.

Analytics

We use Google Analytics to understand how the app is used, for example which features are popular and where people run into trouble, so we can improve it.

Analytics is enabled only when a measurement ID has been configured for the production environment, so it does not run in development or where no ID is set. Google Analytics is configured to handle IP addresses in a privacy-protective way, and usage data is retained by Google for a limited period in line with its analytics retention settings.

In plain terms: we measure how the app is used to improve it, but only when analytics is switched on for the live site.

We do not use advertising cookies

We do not use advertising or ad-targeting cookies, and we do not allow third parties to use cookies on Chomply to build advertising profiles.

If that ever changed, we would update this policy first and seek your consent before setting any advertising cookies.

In plain terms: no ad cookies, and we would ask you first before ever introducing any.

Managing cookies

You can control and delete cookies through your browser settings. Most browsers let you block or remove cookies, and clear local storage, from their privacy or history settings.

Please note that blocking strictly necessary cookies will prevent you from signing in and using the app, because those cookies are what keep your session working.

In plain terms: your browser lets you manage cookies, but if you block the essential ones you will not be able to sign in.

Changes to this policy

We may update this policy from time to time. When we do, we will publish the updated version with a new effective date.

In plain terms: if our cookie use changes, we will update this page and re-date it.

Contact us

If you have any question about this policy, contact us at [[LEGAL.PRIVACY_EMAIL NOT SET]].

In plain terms: that email reaches us for any cookie question.

[FOR LEGAL REVIEW: confirm no consent banner is required while only strictly necessary, functional and first-party analytics cookies are in use, including for visitors located in the European Union and United Kingdom.]