Legal
Cookie Policy
Last updated: 31 October 2026
What we use
Stoa uses only what is strictly necessary for the service to work. We do not use analytics, advertising, or tracking cookies, and no third-party services set cookies on stoa.day. Because everything we use is essential, we don't ask for consent, but we explain each item below.
| Name | Type | Purpose | Duration |
|---|---|---|---|
| STOA_SESSION | Cookie | Keeps you signed in securely. It cannot be read by page scripts. | Until you sign out. It expires after 14 days without a visit, or 30 days after sign-in. A platform administrator session expires after 30 minutes without a visit, or 8 hours after sign-in. |
| XSRF-TOKEN | Cookie | Lets Stoa check that a signed-in action came from Stoa, not from another website. Page scripts can read it. | Until you close the browser, or until you sign out |
| stoa-theme-user | Browser storage | Remembers which account's Night or Dawn theme to show before the page loads. | Until you clear it |
| stoa-theme:<account id> | Browser storage | Remembers whether you chose the Night or Dawn theme. | Until you clear it |
| stoa-signup-plan | Browser storage | Remembers the plan and monthly or annual billing you chose before you create a team. | Until you close the tab |
| stoa-demo-signed-in | Browser storage | Remembers that you opened the demo while signed in, so leaving it returns you to your team. | Until you close the tab |
How to remove them
You can delete cookies and site data in your browser's settings at any time. If you delete the session cookie, you will be signed out.
Contact
Questions: ahmed.alhimdani@gmail.com