Gnosora
Legal

Cookie Policy

Last updated: August 10, 2026.

1. What this covers

This policy explains what cookies and similar browser storage (such as local storage) Gnosora uses and why. It complements our Privacy Policy.

2. Our approach: essential only

We deliberately run Gnosora without advertising or cross-site tracking technologies. The only cookies set are strictly necessary ones — required for signing in and paying. Our analytics works without cookies or persistent device identifiers. That is why you see a short informational notice instead of a consent pop-up: under EU ePrivacy rules, consent is required only for cookies that are not strictly necessary, and we set none of those.

3. Strictly necessary cookies

Authentication (Clerk). When you sign in, Clerk sets session cookies (for example __session, __client_uat) so you stay signed in securely. Blocking them breaks sign-in and everything that depends on it (saving results, history, sharing).

Payments (Stripe).When paid subscriptions are live, checkout happens on Stripe’s own pages, and Stripe sets the cookies it needs for a secure payment session (including fraud prevention). See Stripe’s cookie policy for details.

4. Local storage (stays on your device)

We use browser local storage for a few functional values. They never leave your device and contain no personal data:

  • gnosora:theme — your light/dark theme choice;
  • gnosora:pending-attempt — an unsaved test result, so it can be saved right after you sign in;
  • gnosora:sub-activated-pinged — a flag that prevents a duplicate analytics event after checkout;
  • gnosora:cookie-notice — remembers that you dismissed the cookie notice.

5. Analytics without cookies

We use PostHogfor product analytics and error monitoring in cookieless mode: no analytics cookie is set and no identifier is stored on your device, so anonymous visits cannot be linked across sessions. When you are signed in, product events are associated with your account so we can understand how the product is used. Our hosting provider’s web analytics (Vercel) is likewise cookieless and aggregate-only.

6. How to control cookies

You can block or delete cookies in your browser settings at any time. Note that blocking the strictly necessary cookies above will prevent sign-in. Clearing your browser’s site data also resets the local-storage values listed in section 4 (your theme choice returns to the system default).

7. Changes and contact

If we ever add a cookie category that requires consent, we will update this page and ask for consent first. Questions: support@gnosora.com.