Cookie Policy

This is a preliminary version. It replaces an earlier document that described things imai.ge does not do. It is accurate about how the Service works today, but some sections are still short of detail and none of it has been reviewed by a lawyer yet. A reviewed version will follow. Questions: support@imai.ge.

1. What this policy covers

This policy covers our website at www.imai.ge and the imai.ge web app you use in a browser at app.imai.ge. It explains what we store on your device when you use them, and why.

It is written by MASP Software B.V., the company behind imai.ge. Our full details are in the Terms of Service, and what we do with personal data generally is in the Privacy Policy.

The mobile apps are different. The iOS and Android apps do not run in a browser and do not use cookies. They keep the same kinds of things on your device — the token that keeps you signed in, and your settings — using the storage the operating system provides for apps, including its protected store for credentials. Deleting the app removes them.

2. Cookies and the other things stored on your device

We store some things as cookies and some in your browser’s local storage.

This policy treats both the same way, because the question that matters is what is being kept and why, not which browser mechanism holds it. Everything we store is listed in what we use.

3. What we use

The website

The website sets no cookies and stores nothing on your device. www.imai.ge is a set of static pages, with no sign-in and no session.

The web app

Two cookies, both needed for the app to work at all:

Cookie	What it does	How long it lasts
sessionid	Keeps you signed in. Every request your browser makes to us is recognised as yours because of this cookie.	Two weeks
csrftoken	A security check. It proves a request came from the app and not from another site acting in your name.	Set when you sign in, for the session

Both are sent only over an encrypted connection.

The web app also keeps a few things in your browser’s local storage:

• the token that keeps you signed in, and which method you signed in with;
• your username and your remember-me choice, if you ticked that box;
• your settings — dark mode, how images are laid out in the grid, the library view you last used, and whether video plays automatically;
• a note of a pending account deletion, so the sign-in page can offer to cancel it during the 30-day window. This is a date and nothing else.

That is the whole list. Nothing stored on your device is used for advertising, profiling or tracking you across other websites — not on the website, not in the web app, and not in the mobile apps. How we count visits to this website, without storing anything on your device, is in the Privacy Policy.

4. Cookies set by other companies

No other company sets a cookie, or stores anything at all on your device, through our website or web app. There is no advertising network and no social media pixel.

Everything the pages need — code, styles, typefaces — is served from our own domain.

When you buy a subscription or credits, the payment is handled by the App Store or Google Play on their own pages. Those pages are theirs, and so are the cookies they use. Their own policies cover them.

5. Your choices

We do not ask you to accept cookies, because we do not set any that you would have a reason to refuse. Consent is required for storage that is not needed to run the service — analytics, advertising, tracking. We have none. What is left is the sign-in cookie, the security cookie, and settings you chose yourself, which are what makes the app work rather than something added on top of it.

You can still clear or block all of it in your browser. Every browser lets you delete cookies and local storage for a site, and refuse new ones. The controls live in your browser’s privacy settings,.

Be aware of what that does here:

• Clearing them signs you out of the web app, on that browser, and resets your settings to their defaults.
• Blocking them stops the web app working. Without the sign-in and security cookies we cannot tell one request from another, so there is no way to sign in. The website itself is unaffected — it needs nothing.

In the mobile apps, signing out clears the token that keeps you signed in, and deleting the app removes everything it kept on your device.

If you want your account and the data in it deleted rather than the storage on your device, that is a different thing and it is explained at /account-deletion.

6. Changes to this policy

We update this policy when what we store on your device changes.

Every version is dated. This policy carries a version number and an effective date at the top, and a version applies from that date.

Small changes — corrections and clarifications — take effect when we publish them.

If we ever start storing something that needs your consent, this policy changes before that happens, not after, and we ask you for that consent separately. Publishing a new version of this page is not how we would obtain it.

If you have a question about this policy, write to us at privacy@imai.ge.