Cookie Policy

Small footprint. Clear controls.

This policy lists the cookies, local storage and session storage that azura.cards uses, what each entry is for and how long it lasts. It covers the public website, your account dashboard and the dashboard demo.

Azura sets no advertising or tracking cookies. The cookies we set are needed to sign you in, to keep your account secure and to credit an invitation. Visit counting uses Cloudflare Web Analytics, which works without cookies and without a visitor profile.

Azura is a brand of Azuria Labs LLC, a Wyoming limited liability company. The Privacy Policy explains the wider processing.

Cookies & similar technologies

Cookies are small values a website stores in your browser. The browser sends them back with matching requests, which is how a website knows you are signed in.
Local storage saves values for a website in your browser without a built-in expiry. The browser does not send them with requests; only the website’s own code reads them.
Session storage works like local storage but lives only for the current tab’s session.

Consent rules can apply to storing or reading information on your device. Cookies that are strictly necessary for a service you asked for, such as signing in, do not need consent. Everything listed below falls into that group; we therefore show no cookie banner. If we ever add an optional technology, we will ask first.

What is stored

Cookies and browser storage · October 11, 2026
Name & technology	Purpose	Duration
`__Secure-better-auth.session_token` cookie, HttpOnly, Secure, SameSite=Lax	Keeps you signed in to your account and the dashboard. Set when you sign in.	With “Trust this device” the cookie lasts 30 days and is renewed while you use the account; without it, until you close the browser. Removed on sign-out.
`__Secure-better-auth.two_factor` cookie, HttpOnly, Secure	Carries a pending sign-in between the password step and the login code or authenticator step.	5 minutes, or until the second step is completed.
`__Secure-better-auth.trust_device` cookie, HttpOnly, Secure	Remembers a device you marked “Trust this device for 30 days”, so the login code is skipped on that device. The value is signed and rotates on each use; a sign-in from a new country forgets the device.	30 days. Removed by “Sign out everywhere”, a password or email change, or removing the authenticator.
`azura_ref` cookie, HttpOnly, Secure, SameSite=Lax	Set when you open an invitation link, so the person who invited you is credited if you register. Contains only the invitation code and the time you opened the link.	30 days.
`azura-2fa-hint-…` cookie, Secure, SameSite=Lax, path /dashboard	Remembers that you chose “Later” on the dashboard’s suggestion to set up an authenticator app, so the suggestion is not repeated for a week. The suffix is your account identifier.	7 days.
`azura-preview-theme` localStorage	Saves the light or dark theme you choose in the dashboard or the demo.	Until you change it or clear it; no automatic expiry.
`azura-preview-invoice` sessionStorage	Keeps a simulated deposit in the dashboard demo while you move around it. Demo only; the live dashboard keeps nothing about deposits in your browser.	For the tab’s session, or until the demo resets or replaces it.

Reading the website, the legal pages or the FAQ sets none of these entries. The sign-in cookies appear only when you register or sign in; the invitation cookie only when you open an invitation link.

Earlier versions saved a perf-lite value in session storage. The current code no longer reads or writes it; the control below removes a leftover value.

Cloudflare, Turnstile & analytics

azura.cards is delivered through Cloudflare. Cloudflare’s security features, including the Turnstile human check on the login and registration forms, can set their own cookies on azura.cards when they protect a request, for example cf_clearance after a challenge or __cf_bm for bot detection; Cloudflare documents them in its cookie reference. They are used for security, not for tracking.

Visit counts come from Cloudflare Web Analytics. It sets no cookies, stores nothing in your browser and does not identify visitors; it reports page views and loading performance to Cloudflare, aggregated per page. Its measurement script is added to our pages by Cloudflare.

We embed no advertising pixels, social-media widgets or third-party fonts. External links lead to websites with their own cookie policies.

Manage your saved settings

This control removes the saved theme, the demo deposit for this tab and any leftover performance entry from this browser. It does not sign you out and does not clear unrelated browser data.

To remove the sign-in cookies, sign out (or use “Sign out everywhere” in Settings → Security). Your browser’s site-data settings can also inspect, block or delete cookies and storage for azura.cards. Blocking the sign-in cookies means you cannot stay signed in.

Updates & contact

The revision date marks the latest update to this inventory. We review it whenever we add a feature or a provider that stores anything in your browser, and we ask for consent before any optional technology starts.

Questions about storage: hello@azura.cards See the Privacy Policy for the operator details.

Cookie Policy.