Legal

Cookies notice

Last updated 2026-04-30

Plain-language draft. This page is a working summary. The full counsel-reviewed terms are available on request via [email protected].

Short version: marketing pages are cookie-less. The app uses one strictly-necessary session cookie. Anything else is opt-in.

Strictly necessary

__session — HttpOnly session cookie set by app.exply.app after sign-in. Lifetime: until log-out or 30 days idle.

Functional

We use a small prefs cookie on the marketing site to remember your locale and theme choice when you make one. Set on first interaction, never before.

Analytics

We do server-side analytics by default — no JavaScript pixels, no cross-site tracking, no third-party scripts. If you opt in to richer analytics later, the consent banner explains exactly what's set.

Third parties

Stripe and Resend use their own cookies on their hosted pages (Stripe Checkout, etc.). Their cookie notices apply when you're on their pages.