Cookie Policy

Nora uses strictly necessary storage only — authentication cookies, CSRF protection, language preference and UI state. No analytics, advertising, or Meta-pixel trackers, so no consent banner is shown.

• numu_localeCookie

  Interface language preference, 1 year, SameSite=Lax, host-only

• numu_sessionCookie

  HttpOnly session cookie, 7 days, Secure, SameSite=Lax; cleared on logout

• numu_csrfCookie

  CSRF double-submit token, 7 days, readable by site JavaScript; cleared on logout

• admin_tokenCookie

  HttpOnly admin session cookie on the admin app, 8 hours; cleared on logout

• Sidebar state

  localStorage

  Remembers sidebar collapsed state on this device; cleared on logout

Logging out clears the session and CSRF cookies and UI state. Blocking essential cookies prevents sign-in. Manage or clear storage anytime in your browser settings.