Cookies

Cookie Policy

Effective: 2026-04-29 · Last updated: 2026-04-29

What we set

GnamiAI sets exactly one cookie, and only after you sign in:

Name Purpose Lifetime Type
gnamiai_session Identifies your authenticated workspace and prevents session forgery. 30 days max, 7 days idle Strictly necessary

Flags: HttpOnly (JavaScript can't read it), Secure (TLS only), SameSite=Lax (sent on top-level navigations, blocked on cross-site iframes), HMAC-signed with a server-held key so a tampered cookie is rejected at the edge before it ever hits the database.

What we don't set

Browser localStorage (technically not a cookie)

We persist a few things to your browser's localStorage. This is local-only data — it never leaves your device, never reaches our servers, and is scoped to your origin (gnamiai.live):

You can wipe all of these from your browser's site settings, or from within the app via the /clear slash command in chat.

How to opt out

Because gnamiai_session is strictly necessary to authenticate you, blocking it means you cannot sign in. Most browsers let you control cookies per site under Settings → Privacy. We do not run a cookie consent banner because we do not set non-essential cookies; if you sign in, you are accepting the session cookie as part of the sign-in action itself.

Changes to this policy

If we ever add a non-essential cookie (we have no plans to), we will update this page, surface a notice in the UI, and obtain consent before setting it where the law requires.

Contact

Questions can be sent to gabrivardqc123@gmail.com.