Cookie Policy

These are required for the site to function, so they are always on.

• Authentication session cookie. Set by our sign-in system (NextAuth / Auth.js) when you log in. It keeps you signed in as you move between pages. Without it, you can't stay authenticated.
• Security / CSRF cookie. A short-lived token used during sign-in to protect against cross-site request forgery.

When you dismiss the cookie banner, we store a small flag in your browser's localStorage so the banner doesn't reappear on every visit. This stays on your device and is not sent to our servers. Your theme (light/dark) preference is stored the same way.

We do not set advertising cookies, and we don't use third-party cross-site tracking or ad-network pixels. Because we only use essential cookies, there is nothing to opt into — dismissing the banner simply acknowledges this notice.

Some pages rely on third-party services that may set their own cookies within their scope — for example, Stripe on billing and checkout flows for fraud prevention and payment processing. These are governed by those providers' own policies. See our Privacy Policy for the full list of subprocessors.

You can clear or block cookies in your browser settings at any time. Note that blocking the essential authentication cookie will prevent you from signing in. Questions? Email contact@evra.pro.