Cookie Policy

Effective date: October 26, 2026

This policy describes the cookies and browser storage used by Neral. No advertising cookies or cross-site advertising trackers are implemented.

The application uses a Supabase authentication session cookie, including possible cookie chunks, to keep you signed in. This cookie is necessary for authenticated product functions. Its name, lifetime, and security attributes follow the deployed Supabase configuration.

Functional local storage

The application stores your language choice, selected workspace identifier, and an unfinished moment capture in localStorage. The workspace identifier is sent in the x-workspace-id request header. The language may be sent as ui_locale with relevant product requests. Unsubmitted content remains local until you submit it.

Local mock-auth sessionStorage keys exist only behind a development-only flag and are rejected by the production configuration.

Security and infrastructure

Cloudflare Turnstile is used on authentication pages and may use technical storage required for bot protection. Cloudflare edge services may also use necessary security mechanisms.

Analytics

The product uses PostHog for allowlisted product-usage events. These events are designed not to include decision text, prompts, responses, email addresses, or raw user identifiers. Neral does not use advertising cookies or cross-site advertising trackers.

Marketing website

The Neral marketing application sets no first-party cookies of its own and loads no advertising scripts or third-party fonts. Cloudflare Browser Insights / Web Analytics loads a beacon that sends page-performance and visit metadata to Cloudflare. It is used for site reliability and performance, not cross-site advertising.

Cloudflare may also apply necessary edge security mechanisms. Cloudflare processing follows its deployed service configuration and terms.

Your controls and contact