Cookie Policy

The short version

Noya sets no advertising cookies. What it stores in your browser is the minimum needed to keep you signed in and to stop an unsaved wall from disappearing when you close the tab, plus Microsoft Clarity and Google Analytics, which show us, without names, how the site is used.

What we store, and why

Strictly necessary

• Your language: written the first time a page works out which language to serve you, so the next one does not have to guess again. Asking for a different language rewrites it.
• Your session: set when you sign in, so every page knows it is you from its first frame. It lasts fourteen days, is readable only by our server, and signing out removes it.

Those two are the only cookies Noya itself sets. The analytics cookies below are set by Microsoft Clarity and Google Analytics.

Stored on your device, but not in a cookie

These live in your browser's own storage and are never sent to a server. They are on this page anyway, because clearing your site data clears them and you should know what goes:

• Your sign-in state: kept by Firebase Authentication in the browser's database, so the app can write as you without asking again. Clearing it signs you out.
• Unsaved walls: a wall you have started but not saved lives here in full, including its messages.
• Hearts: which notes this device has hearted, so the heart stays filled when you come back.
• Your signature: the name you last signed a note with, so you do not type it every time.

Analytics

Microsoft Clarity sets _clck and _clsk, and Microsoft may set MUID, CLID, ANONCHK, MR and SM, to join the pages of one visit into a pseudonymous session recording and heatmap. The text of walls and messages, and anything typed into a field, is masked in your browser before anything is sent. These cookies last from the end of the visit to thirteen months. Visitors in the European Economic Area, the United Kingdom and Switzerland are measured without these cookies, because this site does not ask for cookie consent. Clarity does not run inside a wall embedded on another website.

Google Analytics sets _ga cookies so we can count visits and see which steps people take, like making or sharing a card. It never sees what anyone writes. Visitors in the European Economic Area, the United Kingdom and Switzerland are counted without these cookies. It does not run inside a card embedded on another website.

What we do not use

• No advertising or retargeting cookies.
• No fingerprinting, and nothing collected here is used for advertising.
• No social media pixels.

Managing it

Every browser lets you clear cookies and site data, usually under Privacy settings. Clearing them for this site signs you out and permanently deletes any wall you had not saved. Save a wall first if you want to keep it.

Contact

Questions go to support@noya.so, or through the contact page. See also our Privacy Policy.