Cookie Policy

This is a preliminary version. It replaces an earlier document that described things imai.ge does not do. It is accurate about how the Service works today, but some sections are still short of detail and none of it has been reviewed by a lawyer yet. A reviewed version will follow. Questions: support@imai.ge.

1. What this policy covers

This policy covers www.imai.ge and the imai.ge web app at app.imai.ge: what they store on your device, and why. What we do with personal data generally is in the Privacy Policy.

The mobile apps do not use cookies. They keep the same things — the token that keeps you signed in, and your settings — in the storage the operating system provides for apps, including its protected store for credentials. Deleting the app removes them.

2. What we use

The website

www.imai.ge sets no cookies and stores nothing on your device. It is a set of static pages, with no sign-in and no session.

The web app

Two cookies, both needed for the app to work at all, and both sent only over an encrypted connection:

Cookie	What it does	How long it lasts
sessionid	Keeps you signed in. Every request your browser makes to us is recognised as yours because of this cookie.	Two weeks
csrftoken	A security check. It proves a request came from the app and not from another site acting in your name.	Set when you sign in, for the session

It also keeps a few things in your browser’s local storage:

• the token that keeps you signed in, and which method you signed in with;
• your username and your remember-me choice, if you ticked that box;
• your settings — dark mode, how images are laid out in the grid, the library view you last used, and whether video plays automatically;
• a note of a pending account deletion, so the sign-in page can offer to cancel it during the 30-day window. This is a date and nothing else.

That is the whole list, and no other company is on it. Nothing stored on your device is used for advertising, profiling or tracking you across other websites — not here, not in the web app, not in the mobile apps. There is no advertising network and no social-media pixel.

One measurement script runs on this website. Cloudflare Web Analytics counts visits to www.imai.ge. It is cookieless: it stores nothing on your device, sets no identifier, and cannot follow you to another site. It does not run in the web app or in the mobile apps. Apart from that script, everything the pages need — code, styles, typefaces — comes from our own domain.

3. Your choices

We do not ask you to accept cookies, because we set none you would have a reason to refuse. Consent is required for storage that is not needed to run the service — analytics, advertising, tracking. We have none. What is left keeps you signed in, keeps the app secure, and remembers settings you chose yourself.

You can still clear or block all of it in your browser’s privacy settings. Be aware of what that does here:

• Clearing signs you out of the web app on that browser, and resets your settings to their defaults.
• Blocking stops the web app working. Without the sign-in and security cookies we cannot tell one request from another, so there is no way to sign in. The website itself needs nothing and is unaffected.

In the mobile apps, signing out clears the token that keeps you signed in, and deleting the app removes everything it kept on your device.

Deleting your account and the data in it is a different thing — see /account-deletion.

4. Changes to this policy

This policy carries a version number and an effective date at the top, and a version applies from that date. Corrections and clarifications take effect when we publish them.

If we ever store something that needs your consent, this policy changes before that happens, and we ask you for that consent separately. Publishing a new version of this page is not how we would obtain it.

Questions about this policy: privacy@imai.ge.