postfly legal
Cookies
Every cookie and browser-storage item postfly sets, why, and for how long — all strictly necessary, so no consent banner is shown.
Effective from: 15 September 2026
1. What we store in your browser
| Name | Purpose | Lifetime | Type |
|---|---|---|---|
| postfly.session_token | Keeps you signed in between requests. | 30 days | Strictly necessary |
| postfly.two_factor | Holds the short-lived two-factor sign-in challenge between entering your password and entering your authenticator code. | 10 minutes | Strictly necessary |
| postfly-locale | Remembers whether you chose English or Slovak. | 1 year | Strictly necessary |
| postfly-theme (localStorage) | Remembers whether you chose light or dark mode. | Until you clear it | Strictly necessary |
Both postfly.session_token and postfly.two_factor are HttpOnly, so no script running on the page can read them, and carry the __Secure- prefix whenever the site is served over HTTPS.
2. No consent banner
Every item above is strictly necessary to sign in, keep your session secure, and remember your language and display preference — none of it is used for advertising, tracking or analytics, and postfly runs no analytics or tracking scripts of any kind. Under the ePrivacy rules, strictly necessary storage does not require consent, so postfly shows no cookie-consent banner.