Legal
Cookies and browser storage
NEMUQU sets two cookies, both needed to sign you in, and keeps five small preferences in your browser. There are no advertising, analytics or cross-site tracking cookies.
On this page
Cookies
Both cookies are first-party, set by the NEMUQU API, and cannot be read by page scripts. They are strictly necessary: without them you cannot sign in, so they are not offered as a choice.
| Cookie | Purpose | Lifetime | Attributes |
|---|---|---|---|
__Host-pastepile_session | Keeps you signed in. The cookie holds a random token; the server stores only its hash. | Up to 14 days. By default the session also ends after 8 hours without an authenticated request, and it ends when you sign out. | HttpOnly, Secure, SameSite=Lax, first-party |
__Host-pastepile_mfa | Holds a half-completed sign-in while you enter your authenticator code. | 5 minutes, or until sign-in completes. | HttpOnly, Secure, SameSite=Lax, first-party |
Browser storage
These values stay in your browser. The only one ever sent anywhere is the campaign name, which travels with a public-page count; none of them identifies you. Clearing site data removes them.
| Key | Where | Purpose | Lifetime |
|---|---|---|---|
pp-theme | localStorage | Your light, dark or system theme choice. | Until you clear it or choose System. |
pp-nav | localStorage | Whether the workbench navigation rail is open or closed. | Until you clear site data. |
pp-first-run-done | localStorage | That you dismissed the first-run guide. | Until you clear site data. |
pp-workspace-density | localStorage | Compact or comfortable case view. | Until you clear site data. |
pp-campaign | sessionStorage | A campaign name from a link you followed (utm_campaign), attached to the anonymous public-page counts. Stored only while those counts are turned on. | Until the browser tab closes. |
What is not used
- No third-party analytics, advertising pixels, session recording or chat widgets. The site's content security policy would block their scripts.
- No cross-site tracking, no sale or sharing of personal information, and no targeted advertising.
- No fingerprinting. Public-page counts, when turned on, store only the event name, an optional campaign name and the hour.
Activity NEMUQU records without cookies
Some records do not live in your browser but are worth knowing about. When you are signed in, NEMUQU records product actions (for example, opening a finding or copying a hunt query) in its own database, linked to your account, your organization and the case. These records are used to operate and improve the product, are never sold or shared, and have no separate age-based deletion. They are removed when your organization is closed; if only your account is removed, they remain without the link to you. There is no switch to turn them off. Infrastructure providers also keep request logs, which include IP address and browser user agent. See Data retention for the full list.
Your choices
You can block or clear cookies and storage in your browser settings. Blocking the two cookies prevents sign-in; blocking the preferences resets your theme and layout choices. Because nothing is sold, shared or used for advertising, there is nothing for a cookie banner or an opt-out signal to switch off. See Privacy choices.
Last updated .