Athmane uses only the essential cookies and local storage needed to sign you in and run the Service. We do not use advertising, analytics-profiling, or cross-site tracking cookies.
| Name / type | Purpose | Type | Retention |
|---|---|---|---|
| theme (cookie) | Remembers light or dark so the first paint matches your choice | Essential | 1 year |
| __rt (cookie) | Authorises your browser to load YOUR app preview; HttpOnly, scoped to that one preview path | Essential | 4 hours |
| athmane_site_session (cookie) | Set ONLY on a published app whose owner has put it behind an access gate, after you unlock it — so you are not asked again on every page. HttpOnly, carries no identity, and lives on that app’s own address, not ours | Essential | 1 week |
| Sign-in token (local storage) | Keeps you signed in after a magic-link login — sent as an Authorization header, not as a cookie | Essential | Until you sign out or clear it |
| App state (local storage) | Active workspace, editor and accent preferences, dashboard pins, unsent chat drafts, saved and recent prompts, cached avatar, preview session ids | Essential | Until you clear it |
We also rely on our CDN / WAF provider (Cloudflare) for security, which may set an essential cookie to protect the Service from attacks.
This notice covers athmane.com, where you sign in, and the preview origin <sid>-preview.athmane.app, which is where __rt is set. Visiting a published app at <slug>.athmane.app normally sets no platform cookie — we store nothing on your device and read nothing from it. There is one exception: if the app's owner has put it behind an access gate and you unlock it, we set athmane_site_session on that app's own address to remember that you did, for one week. It is HttpOnly, it carries no identity, and without it you would be asked to unlock the app again on every page. That makes it strictly necessary, so it needs no consent banner. Anything the app itself stores is its owner's doing and is covered by that app's own notice, not this one.
Everything above is essential, and blocking it degrades the Service in different ways. Blocking cookies alone loses your light/dark choice and stops app previews from loading; it does not sign you out, because your sign-in token is not a cookie. Clearing local storage does sign you out, and also drops any unsent chat drafts and saved prompts. Both can be cleared from your browser settings at any time.
If we ever introduce non-essential cookies, we’ll update this notice and add a consent mechanism first. Questions: [email protected].