Cookies and device storage

Shely uses browser storage to keep the service working. Cookies are only one form of device storage. The current browser client uses localStorage and sessionStorage for the items below; clearing cookies alone may not remove them.

What the browser keeps

• shely.session.v1 in localStorage keeps account sign-in state, including access and refresh tokens and encrypted identity information, between visits.
• shely.vault.v1 in sessionStorage keeps unlocked identity key material and its unlock expiry for the current tab. It is readable by scripts running on the Shely origin while present. Locking the vault or signing out removes that stored material. Do not treat browser storage as protection against a compromised device or script.
• shely.prefs.v1 and shely.preferences.v1 store interface preferences, such as theme and terminal settings.
• shely.teamview.v1 and shely.defaultview.v1 remember the selected team and personal or team view.
• shely.billing.v1 remembers a locally selected plan preview. It is not a payment, receipt or active subscription.

Session storage is scoped to a browser tab. Browser session restoration can affect how long it remains available, so use the vault lock and sign-out controls rather than relying only on closing a window. Local storage stays until the app removes it or you clear the relevant site data.

Cookies, advertising and analytics

The current website code does not set an advertising cookie or include an advertising or analytics tracking script. Authentication uses tokens rather than a browser login cookie in this client. Infrastructure or external sites may have their own storage and request logs; this page does not claim that no infrastructure service can set a cookie. A request log is not the same thing as a browser cookie.

If we add optional analytics, advertising or other storage that requires consent, we will explain it and provide the legally required choice before using it. This page is information, not a request for blanket consent to future tracking.

Native app storage

Native apps keep settings, account state and local hosts or credentials using platform storage, including protected credential storage where implemented. Browser local storage is also used for preferences in the shared Windows interface. Local app data does not disappear merely because you request removal of a server-side account. Exports and operating system backups may contain separate copies.

Your controls

You can sign out, lock your vault and revoke a device session through available account controls. Use your browser's site data settings to remove local storage and session data for each Shely origin you used. Blocking or clearing storage can sign you out, reset preferences or prevent features from working. It does not delete your account or erase information on remote servers.

For server-side data requests, see the privacy policy or contact [email protected]. Do not send authentication tokens or vault material with a support request.