To keep you logged in, Akatora uses a multi-tier storage strategy: IndexedDB is used first, with local storage as a fallback, and a small set of cookies as a last resort if neither is available. This is strictly necessary for the app to function — without it, you’d have to log in again on every page.

The cookies involved are:

• akatora-auth-* — sharded authentication tokens, kept for approximately 30 days, SameSite=Lax, Secure when served over HTTPS.

• akatora-rt — a refresh token, kept for up to 365 days, with the same security settings as above.

• akatora-session — an opaque reference to your session on our server, kept for 30 days, HttpOnly and Secure.

None of these are tracking cookies, and none require your consent under EU law, since they are essential to the service you’ve asked for.

If you enable push notifications, your browser also stores a notification subscription so we can deliver alerts to your device.

If you use Akatora as an installed app (PWA), your browser caches some app assets (images, icons) locally through the Cache API so the app loads faster and can work offline — this is a performance feature, not tracking.