TrustNet
Legal · Draft

Cookie & Storage Policy

The cookies and browser storage TrustNet uses, why they are strictly necessary or functional, and how to clear them.

Document: TrustNet-Cookies-v0.2 Version: 0.2 Updated: 2026-10-21 Status: Draft — counsel review pending Audience: All users

1What we use

TrustNet uses cookies and browser storage to keep you signed in, protect the login and consent flows, and remember a display preference. We do not use analytics, advertising or cross-site tracking cookies.

2Inventory

Name / keyTypePurposeLifetime
Kratos session cookie (__Host- prefix) Cookie — strictly necessary Keeps you signed in; host-only, not readable by another origin. Up to 24 hours; ends earlier on sign-out or session revocation.
Hydra login/consent flow cookies Cookie — strictly necessary Protects the OAuth2 authorize, login and consent steps against CSRF and carries short-lived flow state. Short-lived; cleared when the flow ends.
trustnet-theme-v2 localStorage — functional Remembers light or dark theme. Until you clear browser storage.
Settings pane key sessionStorage — functional Remembers the last account-settings pane you opened in this tab. Until the tab closes.

3Zero-tracker statement

The public site loads its fonts and diagrams from its own origin. It does not load Google Fonts, analytics scripts, advertising pixels or social embeds. We do not sell personal data and do not build advertising profiles.

Scope. This statement is about tracking. Infrastructure providers still process technical data needed to serve the site (for example, the hosting and object-storage providers). See the Privacy Policy for recipients and transfers.

Under Legea 506/2004 (the Romanian ePrivacy transposition), storing or accessing information on your device requires consent unless it is strictly necessary to provide the service you requested. The cookies above are either strictly necessary for authentication and security or functional preferences you choose. We therefore do not show a consent banner for them.

If we add analytics or any non-essential storage, we will ask for your consent first and update this inventory.

5How to control storage

You can delete or block cookies and site data in your browser settings. Blocking the session or CSRF cookies will prevent sign-in and consent from working. Clearing trustnet-theme-v2 only resets the theme.

6Changes

We update this page when the inventory changes and publish a new version date.

7Contact

Questions: privacy@trustnet.app.