TurnlyCookie policy
Last updated:
This document is currently available in English and Portuguese. If a translation differs, the English version applies.
Turnly does not use advertising, analytics or social media cookies, and does not load trackers from other companies. We only store what is strictly needed for the site and the app to work, which is why we do not show a cookie banner.
Cookies
| Name | Purpose | Duration |
|---|---|---|
| NEXT_LOCALE | Remembers the language you chose on the website, when it differs from your browser's | Until you close the browser |
| better-auth.session_token (with the __Secure- prefix on HTTPS) | Keeps you signed in to the web app (HttpOnly: not readable by scripts) | 60 days, renewed while you use it; deleted when you sign out |
| better-auth.state, better-auth.oauth_state | Protects sign-in with Google or Apple against forged requests | A few minutes |
| turnly_oauth | Links a sign-in started in the mobile app to its return to the app | 10 minutes |
Local storage in the web app
The web app at turnly.org/app saves a few preferences in your browser so it works as you left it. They never leave your device.
| Key | Purpose |
|---|---|
| turnly.circle, turnly.recipient | The circle and the person you had open |
| turnly.pendingInvite | An invitation you opened before signing in, so it can be accepted afterwards |
| turnly.textScale | Your chosen text size |
| turnly.lockMinutes, turnly.pinHash, turnly.pinSalt | The optional PIN lock for shared devices (the PIN is stored only in scrambled form) |
| turnly.entryLook | Which welcome screen design to show |
In the mobile apps, the sign-in token and the same preferences are kept in the phone's secure storage (Keychain on iPhone, Keystore on Android).
Content from other companies
The website and the web app load their fonts, images and videos from our own server, not from Google Fonts, YouTube or similar services. A map opens only if you tap an appointment's address, and then in your maps app or on Google Maps, under that provider's own policy.
How to remove them
Signing out deletes the session cookie. You can delete all cookies and local storage for turnly.org in your browser settings at any time; you will then need to sign in again. If we ever want to use non-essential cookies, we will ask for your consent first.