Cookie Policy
Last updated: 01/11/2026
1. What cookies are
Cookies are small files that websites store in your browser to remember information about your visit, such as your language or your session. The browser's local storage (localStorage and sessionStorage) does a similar job, and this policy treats it the same way.
2. What we use
On twinyx.app and in the dashboard we only use technical or preference cookies and storage. We do not use advertising or tracking cookies, or third-party cookies for analytics.
2.1 Technical (necessary) cookies
| Cookie | Purpose | Duration | Type |
|---|---|---|---|
auth_token | Keeps you signed in to the dashboard. It is invalidated when you sign out or change your password. | 7 days | First-party, technical, httpOnly |
twofa_challenge | Completes sign-in when you have two-factor authentication enabled. | 5 minutes | First-party, technical, httpOnly |
oauth_state | Protects sign-in with Google against forgery attacks. | 10 minutes | First-party, technical, httpOnly |
twinyx_locale | Remembers the language of the website and the dashboard. | 1 year | First-party, preference |
2.2 Local storage
| Key | Purpose | Duration |
|---|---|---|
twinyx-theme, twinyx-landing-theme | Remember the light or dark theme you choose. | Until you delete it |
twinyx_locale_mirror | Keep the dashboard language in the mobile app. | Until you delete it |
twinyx_ref_code, twinyx_ref_source | Apply, when you register, the code and source of the invitation you arrived through, which gives you extra trial days. | Until registration |
twinyx_promo_dismissed, twinyx_push_prompt_v1 | Avoid showing you again a notice you have already closed. | Until you delete it |
auth_user, auth_subscription (sessionStorage) | Show your account while you browse the dashboard. | Until you close the tab |
2.3 Analytics
| Tool | Cookies | Purpose |
|---|---|---|
| Umami, hosted by us | None | Aggregated, anonymous visit statistics. It stores nothing in your browser and no personal data. |
2.4 Third-party services
- Stripe: when you pay, we take you to Stripe's payment page, which uses its own cookies to process the payment and prevent fraud, under Stripe's cookie policy.
- Cloudflare Turnstile: it checks at sign-up, sign-in and password reset that you are not a bot. We use it only for that security check; Cloudflare also uses those technical signals to improve its bot detection, as the Privacy Policy explains.
- Telegram: on the website, pages with the Telegram button load its component from telegram.org. When you sign in with Telegram, its page uses its own cookies, under Telegram's privacy policy.
- Google: when you sign in with Google, we take you to its page, which uses its own cookies, under Google's cookie policy.
3. Legal basis
Technical cookies and storage, and the preference ones the user chooses, are exempt from consent under Article 22.2 of Ley 34/2002 (LSSI-CE, the Spanish act on information society services and e-commerce), because they are necessary to provide the service you request or to remember the options you choose. That is why we do not show a cookie banner.
4. How to manage them
You can block or delete cookies and local storage from your browser. If you block the technical ones, you may not be able to sign in to the dashboard.
5. Changes to this policy
We will update this policy if we add new cookies or similar technologies. The update date appears at the top.
6. Contact
For any question about this policy: admin@twinyx.app. More information about the processing of your data in the Privacy Policy.