Privacy & data
Transparency noticeCookie and Similar Technologies Notice
A functional inventory of essential and user-requested browser technologies.
1. Essential and requested technologies
This Notice explains how OperalonOS uses cookies, local storage, session storage, and similar browser technologies.
| Category | Purpose | Typical duration | Classification |
|---|---|---|---|
| Authentication and session | Authenticate users, refresh sessions, and protect account access | Session or provider-configured period | Strictly necessary |
| OAuth state and callback context | Prevent login or integration forgery and return users safely | Approximately 10 minutes or flow completion | Strictly necessary |
| Invitation redemption | Bind a single-purpose invitation flow to the intended session | Approximately 10 minutes | Strictly necessary |
| Workspace preferences | Remember user-requested interface and accessibility settings | Until cleared, best-effort logout cleanup, or version replacement | Functional |
| Onboarding draft recovery | Recover company, contact, operating-profile, integration, and team setup entered during onboarding | Up to approximately 12 hours unless completed or cleared earlier | Functional |
| Message draft recovery | Recover unsent recipient, provider, subject, and body state | Up to approximately 7 days for the current composer; some legacy draft surfaces remain until sent, discarded, logout cleanup, or browser clearing | Functional |
| Template and interface working state | Preserve template content, pinned notes, navigation, and user-requested working state | Current session or until saved, discarded, version-replaced, logout cleanup, or browser clearing, depending on the feature | Functional |
| Integration navigation context | Preserve pending integration and safe return state | Current browser session or flow completion | Strictly necessary when used |
2. Advertising and non-essential analytics
Nightvault does not deploy third-party advertising pixels or cross-site behavioral tracking on the authenticated OperalonOS product or Legal Center. OperalonOS records first-party, Account- and Workspace-linked operational, security, capacity, reliability, and product-usage telemetry needed to run, protect, troubleshoot, and improve the Service. Any later advertising or covered non-essential third-party technology must receive appropriate notice, consent or opt-out, and controlled release before use.
3. Browser controls and universal opt-out signals
Users may clear cookies and browser storage through browser settings, which may sign them out or remove settings and drafts. Shared-device users should clear sensitive drafts and sign out. Nightvault currently does not sell or share Personal Data for cross-context behavioral advertising, so a Global Privacy Control signal does not change those absent practices. If covered processing is introduced, legally applicable universal opt-out signals will be honored before that processing begins.