Legal
Last updated: September 2026
Novaralis does not use advertising cookies, tracking cookies, or third-party profiling of any kind. We store three things in your browser: the cookie that keeps you signed in, and two preferences you set yourself. Because neither is used for tracking, we do not show a cookie consent banner — under the ePrivacy Directive and the UK PECR, consent is not required for storage that is strictly necessary to deliver a service you asked for, or that you created yourself by changing a setting.
| What | Type | Why | How long |
|---|---|---|---|
| sb-…-auth-token | Cookie | Keeps you signed in. Set by Supabase, our authentication provider. Without it every page would ask you to log in again. | Until you sign out or it expires |
| nv.notepad.geometry | Local storage | Remembers the size and position you dragged the project notepad to, so it is the same next time. | Until you clear your browser data |
| nv.pages.collapsed | Local storage | Remembers whether you hid the page list in a project, so it stays how you left it. | Until you clear your browser data |
| Cloudflare Turnstile | Cookie, set by Cloudflare | Distinguishes a person from an automated script at login and signup. It does not identify you or follow you to other sites. | Set and controlled by Cloudflare |
That is the complete list. If you open your browser's developer tools and find something not on it, that is a bug and we would like to hear about it.
We use PostHog to count how the product is used — how many searches run, how many evidence tables get built — so we know what to improve. It is configured so that nothing is written to your browser at all: no cookie, no local storage entry. Analytics data lives only for the length of a page visit and is tied to your account id once you are signed in.
We have also turned off automatic capture of what you type. Novaralis holds unpublished research questions and draft writing, and none of it is sent to our analytics provider.
Consent banners exist because of tracking. Since we do not track you, do not advertise, and do not share behavioural data with anyone, the legal basis for a banner does not arise. Adding one anyway would ask you to consent to something that is not happening.
If that ever changes — if we add an advertising network, a session recorder, or any vendor that follows you across sites — we will introduce a consent banner before that vendor is switched on, not after.
You can clear or block storage for this site in your browser settings at any time. Blocking the authentication cookie will sign you out and prevent you from signing back in, because that cookie is how the service knows who you are. Clearing the notepad preference simply resets the notepad to its default size.
Email hello@novaralis.com. See also our Privacy Policy, which covers everything we do with data once it reaches us.