Cookie Policy
Last updated: January 1, 2026
This page explains the cookies and similar technologies (collectively, "cookies") used by the Sierra Realtime web app at realtime.epicessentials.xyz and any subdomain we operate.
1. What is a cookie?
A cookie is a small text file that a website stores on your browser. Some expire when you close the tab; others persist until you delete them. Cookies are how the web remembers things between page loads — login sessions, preferences, etc.
2. Cookies we use
Sierra Realtime keeps cookies to a minimum. We do not use any advertising or third-party tracking cookies.
2.1 Strictly necessary (always on)
| Name | Purpose | Lifetime |
|---|---|---|
access_token | JWT session token. Authenticates you on every API request. | 15 minutes (refreshed silently) |
refresh_token | Renews the access token without re-prompting your password. | 30 days |
csrf_token | Prevents cross-site request forgery on form submissions. | Session |
theme | Remembers your dark / light theme preference. | 1 year |
2.2 Functional (can be disabled)
| Name | Purpose | Lifetime |
|---|---|---|
recent_rooms | Quick-access list of meetings you joined recently. | 30 days |
locale | Saves your preferred display language. | 1 year |
2.3 Third-party cookies during signup
We use Cloudflare Turnstile to protect the registration form against bots. Turnstile sets short-lived cookies on the challenges.cloudflare.com domain. These are functional cookies and not tied to your Sierra Realtime account. See Cloudflare's privacy policy.
3. Local storage
We also use the browser's localStorage for things that don't round-trip to the server (e.g. cached UI preferences, draft messages). These are not cookies but behave similarly.
4. How to control cookies
Most browsers let you delete cookies, block them per-site, or browse in a private/incognito mode that drops them when you close the tab. Note that disabling the strictly-necessary cookies will log you out and prevent the app from working.
5. Do Not Track
We honor the DNT (Do Not Track) header where the law requires it. Because we don't run any third-party advertising or analytics trackers, the DNT signal already matches our default behavior.
6. Changes
Material changes to this page will be announced in-app at least 30 days before they take effect.
7. Contact
Questions about cookies? privacy@epicessentials.xyz.