This Cookie Policy explains how Mediastilo, operated by Nodebyte OÜ ("we", "us"), uses cookies and similar local storage when you use our website and application. It should be read together with our Privacy Policy.
Last reviewed: 20 July 2026
What cookies are
A cookie is a small text file that a website stores in your browser. "Similar technologies" include browser local storage and session storage, which also keep small amounts of data in your browser. We use the word "cookies" below to cover all of these.
Our approach
We keep this deliberately simple. Mediastilo uses only the cookies it needs to sign you in, remember your settings, and stay secure. We do not use advertising cookies, and we do not use third-party analytics or tracking cookies. Because the cookies we set are strictly necessary or preference cookies you control through the product, we do not show a tracking-consent banner. Our performance monitoring runs on the server and does not place tracking cookies in your browser.
Cookies we use
Strictly necessary cookies
These are required for the Service to work. Without them you cannot sign in or use the app securely. They are set by us, sent only to our own servers, and marked so that they cannot be read by scripts running in the page.
| Name | Purpose | Retention |
|---|---|---|
access_token | Keeps you signed in during a session by carrying your authentication token. Set as an HTTP-only cookie. | Short-lived; refreshed automatically |
refresh_token | Lets the app renew your session without asking you to sign in again. Set as an HTTP-only cookie. | Up to 30 days |
onboarding_complete | Remembers that your account has finished onboarding, so the app does not re-check it on every page. | Up to 30 days |
Preference cookies
These remember choices you make so the product behaves the way you expect. They hold a setting, not an identity.
| Name | Purpose | Retention |
|---|---|---|
NEXT_LOCALE | Remembers your chosen language (English or Croatian). | Persistent until changed |
mediastilo:brand-id | Remembers which brand workspace you last had active, so you return to it. | Persistent until changed |
Local and session storage
The app also keeps a few small values in your browser's local and session storage rather than in cookies. These stay in your browser and are not sent to us with each request. They hold interface preferences (for example, whether you prefer a card or table layout) and short-lived signals used while a draft is generating. Clearing your browser storage removes them; the app recreates the ones it needs.
Cookies set by our providers
Some providers we use may set their own cookies when their features are involved:
- Stripe may set cookies during checkout and payment to process the transaction and prevent fraud. This happens on Stripe's payment surfaces. See Stripe's privacy documentation for details.
We list all the providers that process data on our behalf, and what each one does, on our Subprocessors page.
Managing cookies
Because we use only necessary and preference cookies, there is no tracking to switch off. You can still control cookies through your browser: most browsers let you view, block, or delete cookies and clear local storage. If you block our necessary cookies, you will not be able to sign in or use the app.
You can change the two preferences above at any time from within the product: pick your language from the language switcher, and switch brand from the brand switcher.
Changes to this Policy
If we start using a new cookie, or change how we use cookies, we will update this page and its "last reviewed" date before the change takes effect.
Contact
Questions about cookies: contact@heap-software.com
Nodebyte OÜ, Tallinn, Estonia.