This page lists every cookie and similar technology Babil uses in your browser, and what each one does. We do not use cookies for advertising, cross-site tracking, or third-party analytics.
1. What is a cookie?
A cookie is a small piece of data a website stores in your browser so that it can recognise you on later requests. "Similar technologies" include localStorage and sessionStorage, which we also use.
2. Cookies we set
Strictly necessary โ authentication
- Refresh-token cookie โ an HttpOnly, SameSite=Strict cookie that keeps you signed in across sessions. Without it you would have to log in again every time the page reloads. We store the refresh token SHA-256 hashed on the server and rotate it on each use. Lifetime: 30 days or until you log out.
This cookie is strictly necessary to provide the service you asked for (an authenticated session). Under the ePrivacy Directive, strictly necessary cookies do not require consent.
Functional โ browser storage
Babil also keeps a small amount of data in your browser's localStorage / sessionStorage to:
- Remember interface preferences: your language, how you sort your AlgoProfile library, which view of the topic atlas you last used, and which one-time hints you have already dismissed.
- Keep drafts on your device: a post you are composing (sessionStorage, cleared when the tab closes) and, if you browse as a guest, your onboarding picks until you sign up or clear them.
None of this leaves your browser, and none of it is used to build a profile of you across sites.
3. Cookies we do not set
- No advertising or retargeting cookies.
- No third-party analytics (Google Analytics, Plausible, etc.). If we ever introduce analytics, it will be privacy-preserving, explicitly documented here, and โ where required โ behind a consent banner.
- No social-media share pixels.
4. Third-party cookies
Babil's backend does not set third-party cookies on your browser. If a media file you open links to an external host (for example an avatar URL), that host may set its own cookies โ we do not control those. If you embed an external link in a post, clicking through to that external site is subject to that site's own cookie policy.
5. Managing cookies
You can clear cookies or storage at any time from your browser settings. If you clear the refresh-token cookie you will be logged out. Blocking strictly-necessary cookies entirely will prevent the service from working.
6. Changes
If we add a new cookie, we will update this page and the "Last updated" date above. If the new cookie requires consent, we will prompt you before setting it.