Small footprint. Clear controls.
This policy lists the cookies, local storage and session storage that azura.cards uses, what each entry is for and how long it lasts. It covers the public website and your account dashboard.
Azura sets no advertising or tracking cookies. The cookies we set are needed to sign you in, to keep your account secure and to credit an invitation. Visit counting uses Cloudflare Web Analytics, which works without cookies and without a visitor profile.
Azura is a brand of Azuria Labs LLC, a Wyoming limited liability company. The Privacy Policy explains the wider processing.
What is stored
| Name & technology | Purpose | Duration |
|---|---|---|
__Secure-better-auth.session_tokencookie, HttpOnly, Secure, SameSite=Lax | Keeps you signed in to your account and the dashboard. Set when you sign in. | With “Trust this device” the cookie lasts 30 days and is renewed while you use the account; without it, until you close the browser. Removed on sign-out. |
__Secure-better-auth.two_factorcookie, HttpOnly, Secure | Carries a pending sign-in between the password step and the login code or authenticator step. | 5 minutes, or until the second step is completed. |
__Secure-better-auth.trust_devicecookie, HttpOnly, Secure | Remembers a device you marked “Trust this device for 30 days”, so the login code is skipped on that device. The value is signed and rotates on each use. | 30 days. Removed by “Sign out everywhere”, a password or email change, or removing the authenticator. |
azura_refcookie, HttpOnly, Secure, SameSite=Lax | Set when you open an invitation link, so the person who invited you is credited if you register. Contains only the invitation code and the time you opened the link. | 30 days. |
azura_srccookie, HttpOnly, Secure, SameSite=Lax | Set when you arrive from another website or a campaign link. Remembers the name of that site, so we can see which pages lead to an account. Contains no address and no account data. | 400 days, renewed when you come back. The visit record itself is kept and is not deleted. |
azura-2fa-hint-…cookie, Secure, SameSite=Lax, path /dashboard | Remembers that you chose “Later” on the dashboard’s suggestion to set up an authenticator app, so the suggestion is not repeated for a week. The suffix is your account identifier. | 7 days. |
azura-preview-themelocalStorage | Saves the light or dark theme you choose in the dashboard. | Until you change it or clear it; no automatic expiry. |
Reading the website, the legal pages or the FAQ sets none of these entries, except azura_src when you arrived from another site. The sign-in cookies appear only when you register or sign in; the invitation cookie only when you open an invitation link.
Earlier versions saved a perf-lite value in session storage. The current code no longer reads or writes it; the control below removes a leftover value.
Cloudflare, Turnstile & analytics
azura.cards is delivered through Cloudflare. Cloudflare’s security features, including the Turnstile human check on the login and registration forms, can set their own cookies on azura.cards when they protect a request, for example cf_clearance after a challenge or __cf_bm for bot detection; Cloudflare documents them in its cookie reference. They are used for security, not for tracking.
Visit counts come from Cloudflare Web Analytics. It sets no cookies, stores nothing in your browser and does not identify visitors; it reports page views and loading performance to Cloudflare, aggregated per page. Its measurement script is added to our pages by Cloudflare.
We embed no advertising pixels, social-media widgets or third-party fonts. External links lead to websites with their own cookie policies.
Manage your saved settings
This control removes the saved theme and any leftover entries from earlier versions from this browser. It does not sign you out and does not clear unrelated browser data.
To remove the sign-in cookies, sign out (or use “Sign out everywhere” in Settings → Security). Your browser’s site-data settings can also inspect, block or delete cookies and storage for azura.cards. Blocking the sign-in cookies means you cannot stay signed in.
Updates & contact
The revision date marks the latest update to this inventory. We review it whenever we add a feature or a provider that stores anything in your browser, and we ask for consent before any optional technology starts.
Questions about storage: hello@azura.cards See the Privacy Policy for the operator details.