Cookie Policy

1. Scope

This Policy explains cookies and similar browser storage used by the Lauyer website and account flows. A cookie is a small value stored by a browser and sent with later requests. Local storage remains in the browser until the site or user removes it.

2. Strictly necessary authentication cookies

Better Auth and the Lauyer authorization server use strictly necessary cookies to maintain a signed-in session, protect authentication requests, continue OAuth and MCP authorization, remember consent state, and prevent request forgery or replay.

Without these cookies, sign-in, account access, MCP authentication, and consent cannot work. They are used to provide the service you request rather than for advertising.

3. Language and appearance storage

Language routing may use a locale preference so Lauyer can return Portuguese or English consistently. Theme controls may use browser storage to remember light, dark, or system appearance.

These values do not build an advertising profile. Removing them may reset the site to its default language or appearance.

4. Third-party flows

Choosing Google sign-in redirects you to Google, which may set cookies under Google’s policies. Stripe Checkout or Stripe payment components may set cookies or similar technologies for payment, fraud prevention, security, and saved-payment features under Stripe’s policies.

Your MCP client may also use its own cookies or storage. Those third-party technologies are controlled by the relevant provider, not by this Policy.

5. No advertising or first-party analytics cookies

Lauyer does not currently use first-party advertising, behavioral tracking, session replay, or marketing analytics cookies. Cloudflare processes ordinary network and security information needed to deliver and protect the Service, but Lauyer does not use that information to advertise to you.

6. Duration and control

Session cookies generally expire when their configured security period ends, when you sign out, or when authorization is revoked. Preference storage can persist until it is cleared or replaced. Exact durations may change for security reasons.

You can remove or block cookies through browser settings, clear site data, revoke Google access, or sign out. Blocking necessary cookies will prevent account and MCP features from working.

7. Future non-essential technologies

If Lauyer introduces non-essential analytics, advertising, or similar tracking, this Policy will be updated and consent will be requested where required before those technologies are activated.

8. Contact

Questions about cookies and browser storage may be sent to Pedro Martins at privacy@lauyer.org.