Cookie Policy

1.1Cookies are small files stored by the browser that make it possible, for example, to keep you signed in from one page to the next. Local storage (local storage, IndexedDB and the browser cache) works in a similar way, but its data is not sent to the server automatically.

2.1The platform does not work without these cookies. They do not require consent, as they are essential to provide the service you requested:

1. Session (__Secure-next-auth.session-token): keeps you signed in. Encrypted; valid for up to 24 hours and renewed while you use the platform.
2. Cross-site request forgery protection (__Host-next-auth.csrf-token): stops other sites from taking actions on your behalf. Lasts for the browser session.
3. Return address (__Secure-next-auth.callback-url): remembers the page to return to after signing in. Lasts for the browser session.
4. Sign in with Google (setlyst_google_intent, setlyst_google_signup, setlyst_google_2fa, setlyst_google_error, setlyst_google_link and next-auth's state and PKCE cookies): temporarily store the choices made before going to Google and the progress of the sign-in or of linking the Google account. Last up to 15 minutes.
5. Language (NEXT_LOCALE): stores the chosen language. Lasts 1 year.
6. Time zone (tz): stores your device's time zone, so dates and times are shown correctly. Lasts 1 year.
7. Referral (setlyst_ref, when present): stores the referral code of an invitation link, so the person who referred you is credited even if you sign up later or with Google. Lasts 30 days.

3.1We use the browser's local storage (localStorage), session storage (sessionStorage) and database (IndexedDB) for:

1. Light, dark or system theme (theme).
2. Live Mode display preferences (setlyst:live-display) and the number of items per page in lists (setlyst:page-size).
3. A record that the Live Mode swipe hint has been shown (setlyst:live-swipe-hint-seen).
4. Dismissed notices and banners (setlyst:email-banner-dismissed and setlyst-announcements-continued, in session storage, erased when the browser is closed).
5. Offline database (setlyst-offline, in IndexedDB): content saved for offline use and the queue of changes made without a connection, which are synced when the connection returns.
6. Application files kept by the service worker, so the app opens faster and without a connection.

3.2This data stays only on your device and is not used to identify or track you. The offline database is erased when you sign out; preferences remain until you change them or clear the site's data in your browser.

4.1We use Vercel Web Analytics to count visits in aggregate. It does not use cookies, does not create persistent identifiers and does not follow you across sites.

4.2As Setlyst only uses strictly necessary or preference cookies and storage, with no advertising or tracking tools, we do not show a cookie consent banner, in line with the ANPD's guidance on cookies.

5.1Setlyst does not use advertising cookies, does not show ads and does not share browsing data with ad networks.

6.1You can delete or block cookies in your browser settings. Blocking the strictly necessary cookies prevents signing in. Signing out erases the offline data Setlyst keeps on this device.

6.2Questions about cookies and privacy: suporte@setlyst.com.br.