Cookies are small text files stored on your device. We also use related storage such as sessionStorage or localStorage for short-lived UI preferences. This policy explains what we use and why.

These are required for the site and admin to work. They cannot be switched off in our product without breaking core features.

• Authentication / session cookies (Auth.js) — keep you signed in to admin or cleaner areas for a limited time
• ca_locale — remembers the language you chose (or that we detected) on the public site
• admin_tenant_id — lets a platform superadmin stay inside a selected company workspace
• Security cookies set by the sign-in flow (for example CSRF protection)

• ca_cookie_notice — records that you dismissed the cookie notice so we do not show it on every visit
• calendar-rail-day-hint — remembers that an admin dismissed a calendar UI tip
• sessionStorage keys for temporary UI (for example dismissing a magic-login reminder banner)

We do not load Google Analytics, Meta Pixel, or similar third-party advertising cookies on the public marketing site.

When someone uses the public “Try demo” admin, we record first-party events (demo link opened, demo sign-in, which admin screens were viewed) in our own database for platform oversight. Those events are tied to the shared demo account session, not to a marketing advertising profile.

You can delete or block cookies in your browser settings. If you block essential cookies, sign-in and language features may stop working. For privacy questions email nataliakireewa@gmail.com. See also our Privacy Policy.