Legal
Cookie policy
Sign-in cookies and two local storage keys. The complete list fits in a single table, which is rather the point.
The complete list
| Name | Type | Purpose | Lifetime |
|---|---|---|---|
auth-token | Cookie | Keeps you signed in. Strictly necessary. | Until the session expires |
token | Cookie | A second copy of the session, read by older parts of the app. Strictly necessary. | Seven days |
user-storage | Cookie | Your name and email address, so the app header can show who is signed in. | 30 days |
gaddr_sso_tried | Cookie | Records that this browser already checked for a Gaddr account sign-in, so the check does not repeat on every page. Holds the word passive and nothing else. Strictly necessary. | 30 minutes |
gaddr_sso_bound | Cookie | Marks a session that started with your Gaddr account. Holds the word passive and nothing else. Strictly necessary. | One year |
__Host-gaddr_oidc | Cookie | Protects a sign-in with your Gaddr account while it is under way: random one-time values that prove the answer belongs to this browser. Strictly necessary. | Ten minutes |
neurtask-theme | Local storage | Remembers light or dark mode. | Until you clear it |
neurtask-locale | Local storage | Remembers the language you chose. | Until you clear it |
Signing in with your Gaddr account
One Gaddr account signs you in to every Gaddr product, NeurTask included. When you open a page here without being signed in, your browser checks with auth.gaddr.com, the Gaddr account’s sign-in service, at most once every 30 minutes. Signed in to Gaddr, you arrive signed in. Not signed in, you arrive on the page you asked for, and nothing else happens. Signing out of NeurTask signs you out of your Gaddr account too, and signing out anywhere else in Gaddr ends a NeurTask session that started with your Gaddr account.
auth.gaddr.com sets its own cookie, gaddr_sso, on gaddr.com. It holds a random tag for the signed-in account, or the word out, and no personal data in plain text. NeurTask cannot read it: it belongs to gaddr.com, not to this site.
Why there is no banner
Consent is required for cookies that are not strictly necessary. We do not set any. The sign-in cookies are required to keep you signed in, and the two local storage keys hold preferences you set yourself. A banner asking permission for that would be theatre.
What we do not do
- No analytics, on the marketing site or in the app.
- No advertising or retargeting pixels.
- No third-party scripts of any kind. The content security policy blocks them.
- No device fingerprinting, and no IP geolocation lookups from your browser.
The last one became true only after we removed it. An earlier version of this site called a third-party geolocation API from the browser before you had submitted anything, sending your IP address to a company you had never heard of. It is gone, and the CSP now prevents its return.
Turning them off
Blocking the session cookie will log you out and keep you logged out. Clearing local storage resets the theme and language to their defaults. Neither breaks anything else, and neither is used to track you.
Questions about this document: privacy@neurtask.com. All documents are listed on the legal index.