Cookies and device storage at Yanora AI
YANORA INC uses cookies and browser storage at Yanora AI to authenticate requests, protect sign-in, remember selected device preferences, and recover requested creation or payment work. Cookies are sent with requests according to browser rules; local and session storage are stored by the browser and used by application features. Yanora AI is for adults who are at least 18 years old. The eligibility rule does not prevent a privacy or browser-storage assistance request.
Some stored information can identify your account or contain your prompt and draft content. Using a shared device can expose saved local work to someone with access to that browser. The Privacy Policy explains server-held records and external processing.
Authentication and session cookies
The yanora_session cookie supports authenticated access and is HTTP-only. Its expiration follows server configuration; the user-session default is one day and administrator sessions have a separate eight-hour limit. Production configuration uses Secure session cookies. Sign-out and invalidation can end access before a cookie’s scheduled expiry.
Apple sign-in uses yanora_apple_state, yanora_apple_nonce, and yanora_apple_mode for redirect verification and replay protection. These cookies are short-lived, with ten-minute expiry, and are cleared during callback handling. Blocking necessary cookies can prevent sign-in or account actions.
Persistent preferences and creation conversations
Local storage can remember language, playback and reduced-motion preferences, the creation sidebar, and account-specific image conversations. Conversation copies can contain prompt text, references, settings, and generation information. Saved copies exclude signed media-access URLs.
Persistent storage normally remains until changed or cleared; it does not have a universal automatic expiry. The yanora.storage-preferences.v1 choice records whether this device should remember preferences and image conversations. The homepage update signal also uses browser storage for cross-tab refresh.
Tab recovery and report receipts
Session storage supports checkout return references, pending template or creation navigation, settings return, and generation recovery. These references do not prove payment or generation success; the server checks the owner and current state. Creation destination references are bounded by their recovery logic, including a thirty-minute age check.
A public report receipt stores a report identifier, secret access token, status, and delivery state in the current tab. It does not persist your report description, content location, or staff response. The token is sent in a request body and is never placed in a page URL. Session storage usually ends with the browsing session, but tab restoration depends on the browser.
External services and tracking
Google or Apple sign-in and Stripe or PayPal checkout can use their own cookies and storage on their service surfaces. Yanora pages request external font resources and load supported identity functionality when used. Consult the relevant service’s privacy and cookie information for its handling.
The current Yanora application code does not include optional advertising or analytics trackers. Necessary and functional storage is not presented as an advertising accept-all choice. Any optional tracking introduced in the future must have accurate disclosure and the applicable permission and withdrawal controls before use.
Your storage choices
Use Account → Profile → Storage on this device to stop remembering selected device preferences or image conversations. Turning a choice off stops future corresponding persistence and clears the selected current-account copies. Other accounts’ conversation copies on the same device are separate; use browser site-data controls to remove all stored copies.
Save unsent work before clearing storage. Removing site data can sign you out, reset preferences, or remove recovery receipts. These actions do not erase server-held media, fulfill a deletion request, cancel billing, or reverse a payment. Browser settings can block or clear cookies and storage, but necessary features may then fail.
Privacy signals and assistance
The browser preference interface recognizes Global Privacy Control. That signal concerns applicable sale or sharing choices, while functional persistence choices control this device. A browser signal does not by itself erase server information or stop a requested transaction. Do Not Track is not a separate switch for necessary service processing.
Contact YANORA INC at info@yanora.ai. Our business is located in Los Angeles, California, United States. If a storage choice or accessibility barrier prevents you from using a feature or exercising a right, use support form or email info@yanora.ai. This policy’s version and dates identify the published description; material technology changes require updated information.