Rhycon legal

Cookie & Local Storage Notice

A clear inventory of the browser technologies Rhycon uses for authentication, security, and requested functionality.

Last updated: September 8, 2026

This notice explains the cookies and similar browser-storage technologies used by Rhycon, Corp. on app.rhycon.ai and forms part of our Privacy Policy. Cookies are small files sent to a browser. Local and session storage are browser features that allow the Service to remember limited information on a device.

Technologies currently used

Name or categoryTypePurposeOrdinary duration
auth_tokenHTTP-only cookieAuthenticates an account and maintains the signed-in session securely.Up to 30 days of inactivity; may be refreshed while the account remains active.
pending_signupHTTP-only cookieKeeps an in-progress signup together while the user completes phone verification.Up to 15 minutes.
apple_oauth_state and apple_oauth_nonceHTTP-only cookiesProtect the Apple sign-in redirect against forgery and replay.Up to 10 minutes and cleared after the sign-in callback.
pl_operator_tokenHTTP-only cookieAuthenticates an authorized operator to the restricted Prompt Lab interface.Up to 7 days.
Workspace and onboarding storageLocal storageRemembers the selected workspace and preserves unfinished onboarding choices and business-profile drafts.Until completed, canceled, signed out, or cleared in the browser, depending on the item.
Interface preferences and noticesLocal storageRemembers interface choices such as collapsed panels, dismissed help, and notification-banner state.Until the preference is changed, the account signs out, or browser storage is cleared.
rhycon_analytics_consentFirst-party cookieRemembers whether optional Google Analytics is allowed or rejected across rhycon.ai and app.rhycon.ai.Up to 12 months, or until the choice is changed or cookies are cleared.
Transaction and recovery stateSession storagePrevents duplicate checkout or configuration requests and safely resumes an interrupted in-session workflow.Normally until the browser tab or session closes, or when the workflow completes.
_ga and _ga_<container-id>Optional first-party analytics cookies set by Google AnalyticsDistinguish browsers and retain session state so Rhycon can measure page use and confirmed conversions after permission is granted.Up to 2 years, subject to browser limits, or until optional analytics is rejected and the cookies are removed.
rhycon_signup_conversionOptional HTTP-only first-party cookieCarries a signed one-time signal from a newly created Apple account to successful phone verification so the confirmed signup can be counted once.Up to 30 minutes and cleared when the verified signup completes.

Necessary use

Authentication, security, requested signup and OAuth flows, workspace continuity, fraud prevention and the saved analytics choice use necessary browser storage. Rhycon does not use third-party advertising cookies or cross-site behavioral advertising technologies on the Service. Blocking necessary browser storage may prevent sign-in, checkout, onboarding or other Service features from working correctly.

Optional Google Analytics

Google Analytics 4 is blocked until a visitor selects Allow analytics. When allowed, Rhycon uses measurement ID G-CFKP7ZKSXB to understand page use and count a confirmed new-account signup. Rhycon sends a fixed page title, a sanitised path and only the origin of an eligible external referrer. It excludes URL queries and replaces dynamic workspace, booking, campaign, log and similar identifiers before sending a page location to Google. Rhycon does not send account email addresses, workspace IDs, search terms entered in the Service or the contents of customer work to Google Analytics. Advertising storage, Google signals and advertising-personalisation signals remain disabled.

Your controls

Use the Cookie settings control on the Service to allow or reject optional analytics at any time. Rejecting it prevents the Google tag from loading on the next page load and removes accessible Google Analytics cookies for rhycon.ai. Browser settings can also delete or block cookies, local storage and session storage. Signing out clears the active Rhycon session and selected account state handled by the Service.

Changes and contact

We may update this inventory when the Service changes. Questions may be sent to sales@rhycon.ai or Rhycon, Corp., 1111B Governors Ave #87247, Dover, DE 19904, United States.