Cookie Policy
Last updated 2026-07-21
Overview
This policy explains what cookies Gramafin sets when you use the app, and why. It should be read alongside our Privacy Policy, which covers your data more broadly.
What are cookies?
Cookies are small text files a website stores in your browser. A site can read them back on later visits to recognize you or remember a choice you made. Some cookies (“session” cookies) are deleted automatically when you close your browser; others (“persistent” cookies) stay until they expire or you clear them manually.
The cookies we use
Gramafin only sets strictly necessary cookies — the kind required for the app to function, mainly keeping you logged in. We do not use analytics, functionality/personalization, or advertising and targeting cookies of any kind.
| Cookie | Purpose | Duration |
|---|---|---|
| __Secure-next-auth.session-token | Keeps you signed in between visits. Identifies your session only. | 30 days, or until you log out |
| next-auth.csrf-token | Protects the login form from cross-site request forgery. | Session (cleared when you close your browser) |
| _interaction, _interaction.sig | Set only if you connect an AI assistant like Claude via Settings → Connected apps — tracks that one approval step. | A few minutes, until the connection is approved or cancelled |
We also use your browser's local storage (not cookies — this data never leaves your device) for two device-level preferences: dark/light mode and sidebar layout, plus a record of your cookie banner choice.
Cookies we don't use
No Google Analytics, no Meta/Facebook Pixel, no advertising networks, no session-replay or heatmap tools, and no cross-site tracking of any kind. There's nothing to opt out of beyond what keeps you logged in.
Managing cookies
Because our only cookies are strictly necessary ones, there isn't a meaningful “reject” option that leaves the app fully working — blocking the session cookie means you'll be logged out on every page load. The cookie banner shown on first visit records your acknowledgment either way and won't reappear.
You can also block or delete cookies at any time through your browser's settings. Doing so for Gramafin will simply require you to log in again on your next visit.
Changes to this policy
If what we collect changes, we'll update the date at the top of this page. Continued use of Gramafin after a change means you accept the updated policy.
Related documents
See also our Privacy Policy and Terms of Use.
Contact
Questions about this policy? Email saad@gramafin.com.