Last updated: March 2026
This Cookie Policy explains how Ally uses cookies and similar browser storage technologies when you visit our website or use our web application. We keep cookie usage minimal — only what is strictly necessary to provide the service.
We do not use third-party tracking cookies, advertising cookies, or analytics platforms such as Google Analytics. Your browsing activity on Ally is not shared with advertising networks.
Cookies are small text files that a website stores in your browser. They allow the site to remember information between page loads or sessions. Ally primarily uses browser localStorage (a similar technology) rather than traditional cookies, but this policy covers both.
Ally uses only essential storage — nothing that tracks you for marketing or analytics. Below is a complete list:
| Name | Type | Purpose | Expires |
|---|---|---|---|
| ally_token | localStorage | Signed JWT for session authentication | 7 days |
| ally_prefs | localStorage | UI preferences (theme, sidebar state) | Persistent |
| ally_changelog | localStorage | Last-seen changelog version (suppresses notification badge) | Persistent |
| __csrf | Cookie (HttpOnly) | CSRF protection token for API requests | Session |
All storage is first-party (set by myally.app). No data from these entries is shared with third parties for advertising or analytics.
When you sign in, we store a signed JSON Web Token (JWT) in localStorage. This token identifies your session and is sent with API requests to authenticate you. It contains your user ID and account metadata — no passwords or payment information.
The token expires after 7 days. You can revoke it at any time by signing out, which clears the token from your browser.
We store lightweight preference data locally in your browser to remember your settings between sessions — for example, whether you prefer the sidebar collapsed, or which changelog entries you have already viewed. This data never leaves your device.
Ally does not use:
We do not build advertising profiles based on your usage. We will notify you if this ever changes, with at least 14 days' notice before any tracking tools are introduced.
You can clear all Ally storage at any time through your browser settings. The steps vary by browser:
Clearing storage will sign you out of Ally. Your account and data on our servers are not affected — you can sign back in at any time.
If we add new cookies or change how we use existing ones, we will update this page and notify you by email before the changes take effect.
Questions about cookies? Contact us at support@myally.app.