Cookie and Local Storage Policy

The two cookies Leviro Toolbay sets, what it keeps in your browser, and how optional product analytics consent works.

Effective

Cookies we set

CookiePurpose and lifetime
access_tokenKeeps you signed in between requests. Short-lived (about 15 minutes) and refreshed automatically. httpOnly, so no script can read it; marked Secure in production.
refresh_tokenLets your session renew without asking you to sign in again. Longer-lived (up to 30 days), rotated on every use, and revoked when you log out. httpOnly and Secure in production.

Both cookies are set only after you sign in. If you never create an account, we set no cookies at all.

What we keep in local storage

KeyPurpose and lifetime
leviro-themeRemembers whether you chose light or dark mode. Kept until you clear it.
leviro.refA referral code from a ?ref link, so credit reaches the right person if you sign up later. Automatically discarded after 30 days.
leviro.utmutm_source / utm_medium / utm_campaign values from the link you arrived on, used to attribute a signup to a campaign. Automatically discarded after 30 days.
leviro.analytics-consentStores accepted or declined for optional first-party product analytics. Kept until you clear site data or change the choice.

The referral and campaign values are sent to us only once, attached to a signup request. If you never register, they expire in your browser and we never receive them.

If analytics is accepted, session storage also holds a random analytics session ID plus one-time markers that prevent duplicate view, input, and success events. Session storage is cleared when the browser session ends and contains no email, filename, document text, or tool input.

Offline caches

Leviro Toolbay is installable as a progressive web app. When you install it — or simply visit it — a service worker caches pages, icons, styles, and scripts in your browser so tools keep working offline and load faster. This cache holds application assets, not your content.

The high-quality local text-to-speech voice also downloads its model into your browser's storage the first time you use it, so later runs are instant and stay entirely offline. That model file can be large; clearing site data removes it.

Third-party requests

The Arabic and English interface fonts are hosted by Leviro Toolbay and do not contact a font CDN. Google Sign-In loads Google's script only on the login and registration pages, and only if Google sign-in is enabled. We do not use it to track you across sites, and it does not set a cookie on our domain.

Controlling all of this

  • Signing out clears the session cookies and revokes the refresh token on our side.
  • Clearing site data in your browser removes the cookies, theme and referral entries, analytics choice and session, offline cache, and any downloaded voice model.
  • Blocking cookies for this site entirely is fine — you simply will not be able to stay signed in. Every browser-based tool keeps working.

Other policies