Cookie policy

A clear list of the cookies LoreKeep actually uses today.

LoreKeep currently uses cookies for authentication, request security, encrypted library recovery, and a small amount of app functionality. It does not currently set advertising, marketing, or third-party analytics tracking cookies.

First-party cookiesNo analytics cookiesUpdated 2026-05-27

Read privacy policy Read terms

Cookie list

Cookies used by LoreKeep today

These are the current first-party cookies found in the app code.

Type

Purpose

Duration

codexa_session

Strictly necessary

Keeps you signed in to LoreKeep after login. The raw token lives in a secure HTTP-only cookie while the server stores only its hash.

Up to 30 days, or 1 day for shorter sessions

codexa_csrf

Strictly necessary

Protects forms and state-changing requests against CSRF abuse by pairing the browser request with a matching token.

Session-style security cookie

codexa_quick_save_favorites

Functional

Remembers the library IDs you marked as quick-save favorites so the app can show your preferred targets faster.

Up to 1 year

library_recovery_codes

Strictly necessary

Temporarily holds newly generated library recovery codes so you can view and acknowledge them on the recovery-codes page.

15 minutes

Technical notes

How LoreKeep sets these cookies

These implementation details are here because transparency is better than pretending every cookie works the same way.

Session, quick-save-favorites, and recovery-code cookies are set with a first-party path and sameSite=lax.

Sensitive cookies such as the session token and recovery-code payload are set as HTTP-only so browser JavaScript cannot read them directly.

Production cookies are marked secure, which means they are intended to travel only over HTTPS.

Cloudflare Turnstile is used on some public forms for bot protection. It is a third-party security challenge and may process browser signals or use its own storage according to Cloudflare's service behavior.

Contact

Questions about cookies or privacy

If something here is unclear, ask directly rather than guessing what LoreKeep does behind the scenes.

For questions about cookies, privacy, or account data, email support@lore-keep.com.

Open support Read privacy policy

Current position

Why there is no cookie banner today

LoreKeep uses only cookies that are needed for the product to work or for small in-app convenience features.

LoreKeep currently uses authentication, CSRF-protection, encrypted-library recovery, and functional preference cookies. Some public forms also use Cloudflare Turnstile for bot protection.

LoreKeep does not currently set advertising cookies, marketing cookies, or third-party analytics tracking cookies.

If LoreKeep later adds non-essential cookies such as analytics or marketing storage, this page should be updated and a consent flow should be added before those cookies are used.

Scope

What this page covers

This page is about browser cookies used by the web app. The extension also stores some local browser state separately from cookies.

The browser extension stores some local settings in browser extension storage, such as popup preferences, page-detection preferences, cover-capture preferences, selected library state, the floating-button preference, and development app URL selection.

That extension storage is described in the privacy policy, but it is not a normal website cookie.