Cookie Policy

1) What Cookies Are

Cookies are small text files stored on your device by your browser. They help websites remember information between requests, such as login state, security context, or user preferences.

Yahalaly also uses server-side session data and security logs to protect accounts and prevent abuse.

2) Cookies Used on Yahalaly (Current)

Retention periods and cookie names may change when required for security, legal compliance, or product operation. This page will be updated when material changes happen.

• access_token: authentication cookie used to keep a signed-in session active (HTTP-only, up to 15 minutes).
• refresh_token: refresh-session cookie used to rotate and renew authentication safely (HTTP-only, up to 30 days).
• csrf_token: anti-CSRF security cookie used to validate state-changing requests (up to 30 days).
• locale: language selection cookie set when you choose a language (up to 1 year).
• cookie_consent_v1: consent cookie storing your cookie choices (up to 180 days).

3) Cookie Categories

• Strictly necessary: required for login, security, fraud prevention, core platform operation, and remembering your language when you choose one.
• Preferences: optional interface settings beyond core operation.
• Analytics: optional measurement cookies for product insights (currently not enabled by default).
• Marketing: optional cookies for promotional use (currently not enabled by default).

4) Consent Banner and Choice Management

On first visit, Yahalaly displays a cookie banner where you can choose: Accept all, Essential only, or Customize.

You can reopen cookie settings at any time using the on-screen "Cookie settings" control and update your choices.

5) Third-Party Services

Yahalaly may rely on trusted infrastructure and service providers (for hosting, email delivery, and security operations). Where these providers process identifiers, their processing is subject to contractual controls and their own legal obligations.

When optional third-party analytics or marketing technologies are introduced, this policy will be updated before or at launch.

6) Browser-Level Controls

You can control or delete cookies in your browser settings. Most browsers allow blocking specific cookies, clearing stored data, and configuring site-specific controls.

If you disable strictly necessary cookies, key functions such as account login and security features may not work correctly.

7) Do Not Track

Some browsers provide a "Do Not Track" signal. Because there is no uniform industry standard for interpreting this signal, we currently do not respond to it in a standardized way.

8) Changes to This Cookie Policy

We may update this Cookie Policy as our service evolves. We recommend reviewing this page periodically for the latest information.

9) Contact

For questions about cookie usage or privacy controls, contact privacy@yahalaly.com.