cookie policy

Version 2.0 — July 19, 2026 (replaces version 1.0; main changes: website section aligned with the Dutch cookie rules as clarified in 2025; app storage list updated — no call provider)

TODO — before publishing:

1. Have the lawyer confirm the website section against Article 11.7a Telecommunicatiewet and current Autoriteit Persoonsgegevens guidance at publication time (including the 2025 clarifications on low-impact analytics and cookie-banner accessibility).
2. Before adding ANY analytics tool to loro-app.com, verify it qualifies as privacy-friendly/low-impact (no personal data, no cross-site tracking) or add a compliant consent banner first.
3. Publish at /legal/cookies.

---

1. What this policy covers

This policy explains how the Loro mobile app and the loro-app.com website use cookies and similar technologies (local storage, device identifiers, SDK storage). It complements our Privacy Policy, which describes how we handle personal data in general.

2. The short version

The Loro app is not a website — it does not set browser cookies. It stores a small amount of data on your device so the app works: your session, your preferences, and technical identifiers used by the services below. We do not use advertising cookies or cross-site tracking, we do not profile your behaviour for marketing, and we do not sell your data.

3. What the app stores on your device

• Session tokens (essential). Kept by our backend provider (Supabase) so you stay signed in. Removed when you sign out.
• Preferences (essential). Your theme, accent colour, and notification choices (the master push switch and per-category preferences) are stored on the device so the app remembers them.
• Push identifiers (functional). Our notification provider (OneSignal) stores a device-level subscription id so we can deliver the notifications you asked for. Disabling push in the app’s notification settings (or your phone’s system settings) opts the device out.
• Crash and performance data (functional). When enabled for a build, our error-reporting tool (Sentry) stores technical identifiers to group crash reports. These do not identify you personally.

Uninstalling the app removes all locally stored data.

4. The website (loro-app.com)

Dutch law (Article 11.7a of the Telecommunicatiewet, supervised by the Autoriteit Persoonsgegevens) requires consent for cookies except those that are strictly necessary or that have no or minimal impact on your privacy.

• Essential cookies — needed to serve the pages and remember basic choices. Used without consent, as the law allows.
• Privacy-friendly, aggregated analytics — if used, configured so that no personal data is processed and no cross-site tracking occurs (the category of limited analytics that Dutch rules allow without a consent banner, with information provided here and in the Privacy Policy).
• Tracking, advertising, or social-media cookies — we do not use these. If that ever changes, we will first ask for your explicit consent through a clear, accessible cookie banner in which refusing is as easy as accepting, consent can be withdrawn at any time, and no design tricks (“dark patterns”) are used.

5. Your choices

• Sign out of the app to clear your session from the device.
• Turn off push notifications in the app’s notification settings or in your phone’s system settings.
• Manage or delete browser cookies for loro-app.com in your browser settings.
• Uninstalling the app removes all locally stored app data.

6. Changes and contact

We may update this policy as the app and website evolve; the version and date above always reflect the current text, with a summary of the main changes per version. Questions: privacy@loro-app.com.