Cookie Policy
Last updated: April 25, 2026
Yellsy uses only strictly necessary cookies. No advertising, analytics, or tracking cookies. No consent banner required.
1. What Are Cookies
Cookies are small text files stored on your device when you visit a website. They help websites remember your preferences and maintain sessions. Yellsy uses cookies strictly necessary for the operation of the Service.
2. Cookies We Use
| Name | Purpose | Duration | Type |
|---|---|---|---|
| yellsy-auth | Stores authentication tokens in localStorage (not a cookie, no cross-site exposure) | Session / 30 days | Essential |
| __cf_bm | Cloudflare bot management | 30 minutes | Essential |
| h-captcha-* | hCaptcha anti-bot verification on forms | Session | Essential |
3. Authentication Storage
Yellsy stores JWT access tokens (2-hour expiry) and refresh tokens (30-day expiry) in the browser's localStorage. These are sent as HTTP Authorization headers, not cookies, reducing CSRF exposure. They are cleared on logout or after their expiry.
4. Third-Party Cookies
We embed hCaptcha on registration and contact forms. hCaptcha may set cookies for bot detection. Stripe's payment forms are loaded in isolated iframes and may set Stripe-related cookies for fraud prevention. We do not use advertising cookies or social media tracking pixels.
5. Analytics
We do not use Google Analytics or similar third-party tracking. Any analytics are performed server-side on aggregated, anonymised data and do not involve cookies.
6. Managing Cookies
You can control and delete cookies through your browser settings. Disabling essential cookies will prevent you from logging in or completing forms.
Chrome
Settings → Privacy → Cookies
Firefox
Options → Privacy & Security
Safari
Preferences → Privacy
Note: localStorage can be cleared via browser developer tools (Application → Local Storage → Clear).
7. Consent
We only use cookies that are strictly necessary for the Service to function. No consent banner is required under the ePrivacy Directive for strictly necessary cookies. If we introduce optional cookies in the future, we will obtain explicit consent beforehand.
8. Contact
For questions about our cookie practices:
Questions? Contact us