Cookie Policy

Effective: May 26, 2026 · Aevora Labs LLC

In short: Mulyra uses a minimal set of cookies to keep you signed in and to remember your theme preference. We only set analytics cookies after you give explicit consent through our consent banner.

Overview

This Cookie Policy explains what cookies and similar technologies Mulyra (operated by Aevora Labs LLC, 571 Boston Tpke Ste 3 MB 1115, Shrewsbury MA 01545) uses, why we use them, and how you can control them. By continuing to use Mulyra you agree to our use of strictly necessary cookies. Analytics cookies are only set when you actively accept them in our consent banner.

What Are Cookies

Cookies are small text files stored on your device by your web browser. They allow a website to recognise your device and remember information between visits. localStorage is a browser storage mechanism similar to cookies but the data is never automatically sent to the server with each request. This policy covers both cookies and localStorage keys that Mulyra sets.

Cookies We Use

The table below lists every cookie and storage key Mulyra sets.

Name

Type

Purpose

Duration

Third party

sb-access-token

Strictly necessary

Supabase auth session — keeps you signed in. httpOnly, Secure.

7 days

sb-refresh-token

Strictly necessary

Supabase auth refresh — renews your session without re-login. httpOnly, Secure.

7 days

mulyra-theme

Functional

Stores your light/dark theme preference. localStorage only — never transmitted to the server.

Persistent

ph_session_id

Analytics (consent)

PostHog session ID + device ID (hashed). Used for product analytics. Set only when you accept analytics in the consent banner.

Session

PostHog

Analytics and Consent

Mulyra uses PostHog (posthog.com) for product analytics. PostHog is SOC 2 certified and does not sell your data. No analytics cookies are set without your consent. PostHog is placed behind our consent banner. When you visit Mulyra for the first time you will see a consent banner at the bottom of the page. Analytics cookies are only set if you click "Accept" or otherwise opt in to analytics. If you decline, no PostHog cookies or identifiers are created and no analytics data is collected for your session. GDPR legal basis: • Strictly necessary cookies (auth session): legitimate interest — these are required for the service to function. • Analytics cookies (PostHog): consent under GDPR Art. 6(1)(a). You may withdraw consent at any time via the consent banner toggle. We do not use any advertising or tracking cookies. We do not participate in any third-party advertising networks.

GPC / Do Not Track

Mulyra honours the Global Privacy Control (GPC) signal and the legacy Do Not Track (DNT) header. If your browser sends a GPC or DNT signal, we treat it as an opt-out of analytics cookies. PostHog cookies will not be set, regardless of any prior consent banner selection. Strictly necessary cookies (auth session) are unaffected because they are required for the service to function.

Managing Cookies

You can control cookies in several ways: Consent banner: Click the cookie icon or "Cookie Settings" link at the bottom of any page to reopen the consent banner and change your analytics preference. Browser settings: Most browsers allow you to block or delete cookies via their privacy settings. Note that blocking strictly necessary cookies will prevent you from staying signed in. Email us: Contact [email protected] if you need help managing your cookie preferences or have questions about the data we store.

Changes to This Policy

We may update this Cookie Policy from time to time. Changes will be reflected by updating the "Effective" date at the top of this page. Material changes will be communicated via the app or email if you have an account.

Contact

If you have questions about this Cookie Policy or our use of cookies, please contact us at: Aevora Labs LLC 571 Boston Tpke Ste 3 MB 1115 Shrewsbury, MA 01545 Email: [email protected]