Loading…
zTiles uses a small set of technologies to run the product. Under EU and UK law, cookies that are strictly necessary for a service you request (such as staying signed in) do not require consent, but we still explain them here.
| Name | Purpose | Duration |
|---|---|---|
| access_token | Keeps you signed in (httpOnly JWT) | Short-lived (access token lifetime) |
| refresh_token | Renews your session securely (httpOnly JWT) | Longer-lived (refresh token lifetime) |
| csrftoken | Protects state-changing requests from cross-site attacks | Session / per browser policy |
These are set by our API (for example app.napknstack.com) when you sign in or request a CSRF token. They are not readable by site JavaScript (httpOnly where applicable).
We also use localStorage and sessionStorage for UI preferences (sidebar, explore scanner, video quality, tutorial progress), dev-only API tokens on localhost, and similar features. That data stays on your device and is not sent to advertisers. Clearing site data in your browser removes it.
If enabled in our deployment, we may load:
Third-party sign-in (Google, Microsoft, etc.) may set their own cookies during the OAuth flow on their domains; see their privacy policies.
Essential cookies: legitimate interest / contract (providing the service you asked for). Optional analytics and advertising: your consent (GDPR Art. 6(1)(a); UK GDPR equivalent; EU ePrivacy Directive rules on storing information on your device).