Cookies and Local Storage Policy

1. What this policy covers

MyLaura uses cookies, local storage and, in the mobile app, secure or async storage for sign-in, security, language, onboarding and app operation. The term cookies in this policy also includes similar identifiers where they serve the same function.

2. Essential storage

We use essential storage to provide the service and security; disabling it may prevent sign-in, state saving or protected features.

• Better Auth session cookie and related cached data to maintain sign-in and protect private routes.
• Security values for the OAuth or magic-link return and prevention of misuse.
• Preferred language and basic interface state.
• Local onboarding cache to restore in-progress or confirmed state during temporary network outages.
• Mobile push token and local notification settings.

3. Campaign measurement

Public tracking links may carry a campaign, creator or referral identifier. When opened, we may record the time, referrer, technical device type and a pseudonymised or hashed security identifier to attribute an eligible click and prevent duplication.

We do not read PPV views from visitor cookies. We obtain the public metric for a particular Reel through Apify and compare it with the baseline stored at activation.

4. Optional analytics and marketing

MyLaura uses PostHog for optional product analytics only after your express consent. We measure use of screens and features, technical stability and anonymised interactions, such as playback of a recommended video for longer than three seconds. PostHog is configured for European hosting; session replay, location determination and remote feature flags are disabled.

Before consent, we do not start the PostHog client or store its analytics identifiers. Consent or refusal may be changed at any time in account settings. Withdrawal stops further optional measurement and does not affect the lawfulness of earlier processing.

Current acceptance of the general terms or Privacy Policy does not automatically constitute consent to optional marketing tracking.

5. Duration

• Session data lasts until sign-out or server expiry, no longer than the configured session period.
• OAuth security values are short-lived and expire upon completion or expiry of the flow.
• Language and local state remain until changed, the app is deleted or storage is cleared.
• Tracking and anti-fraud records are retained under the Privacy Policy, not indefinitely on the device.
• We retain PostHog analytics events for no more than 12 months; a local or server record of the consent choice is retained under the Privacy Policy.

6. How to control storage

Your web browser allows cookies and local storage to be deleted or blocked. Mobile data may be removed by signing out, deleting the app or through device settings. Optional analytics may be enabled or disabled in account settings. After deleting essential storage, you will need to sign in again.

7. Contact

Send questions about cookies and data protection to [email protected]. Operator: Linksta s. r. o., Fraňa Kráľa 21, 811 05 Bratislava – mestská časť Staré Mesto, Slovenská republika, Company ID 56972024, Tax ID 2122530245, VAT ID SK2122530245.