Legal
Cookie Policy
Last updated September 15, 2026
This Cookie Policy explains how this ScribeFlow instance uses cookies and similar storage, together with the Privacy Policy and Terms of Service.
1. What cookies are
Cookies are small text files stored on your device. Local storage is a similar browser feature. ScribeFlow uses both. Storage on this device is not encrypted.
2. How we use them
- Essential — required to sign in, keep a session, prevent CSRF, complete Google OAuth (including PKCE), and remember your cookie choice.
- Functional — optional. Saves your last lecture draft in this browser so you can restore it. Off until you accept it.
We do not set advertising, social-media pixel, or first-party analytics cookies. Your browser, OS, or extensions may set their own.
3. Cookies and storage we set
| Name | Category | Purpose | Typical lifetime |
|---|---|---|---|
| lectern-cookie-prefs-v1 | Essential | Stores whether you allowed functional storage | Until you clear site data |
| authjs.session-token (and related Auth.js cookies) | Essential | Signed-in Google session | Session / token lifetime |
| authjs.csrf-token | Essential | CSRF protection for sign-in | Session |
| authjs.callback-url | Essential | Where to return after OAuth | Short-lived |
| authjs.pkce.code_verifier | Essential | Google OAuth PKCE | Short-lived |
| lectern-dev-session | Essential | Local test sign-in | Up to 30 days |
| lectern-session-v1 | Functional | Last lecture draft (localStorage, not a cookie) | Until you clear it or turn Functional off |
4. Third-party cookies
If you click Google Sign-In, Google may set cookies on Google domains under Google’s policies. ScribeFlow does not control those cookies. If a live processing key is configured, audio and text are sent to that provider; that is a data transfer, not a ScribeFlow cookie.
5. Your choices
On first visit you can Accept all, Essential only, or Manage categories. You can reopen choices any time from Cookie preferences in the footer. Essential cookies cannot be disabled in-app; you can block them in your browser, but sign-in will not work.
Browser controls: Chrome, Safari, Firefox, and Edge each let you delete cookies and site data. You can also use a private window.
6. Changes
We may update this Policy when we add or remove storage. The “Last updated” date will change.