Soliloquy Back to site

// Soliloquy · Legal · Cookies

Cookie Policy

Effective February 21, 2026

// Self-service legal · plain English

These pages are written for a solo-operated AI SaaS by the maker, not by a law firm. They are reasonable defaults and should be reviewed by an attorney before any high-revenue inflection (acquisition, funding, enterprise contracts, payment-card storage). Last refreshed February 21, 2026.

1. What this page covers

This page explains the cookies and similar browser-side storage that Soliloquy uses, what each one is for, and how you can disable them. We use the minimum set required for the Service to function — no third-party advertising cookies, no cross-site tracking pixels.

2. Cookies we set

2.1 Strictly necessary

  • pf_token — an HTTP-only, secure session cookie containing your signed JWT. Set when you log in or register, cleared on logout. Without this you cannot stay signed in.

2.2 Local storage (not technically a cookie, similar in spirit)

  • pf_user — a cached copy of your basic user profile (id, email, display name, avatar URL) so the cockpit can render instantly on page reload. Cleared on logout.
  • sl_welcome_session_<user_id> — remembers that you’ve seen the Hannah welcome modal this browser session.
  • sl_spam_notice_pending_<user_id> — flag that fires the one-time “check your spam folder” pop-up after registration. Cleared once dismissed.
  • sl_ref_code — the referral code from a ?ref= URL, held in session storage so it survives the click from the landing page to the sign-up form. Cleared once registration completes.

2.3 Strictly third-party (set by sub-processors only when you interact with them)

  • Stripe may set its own cookies during checkout for fraud prevention and to remember your session. We do not control these cookies; see Stripe’s cookie policy.
  • Cloudflare may set the __cf_bm bot-management cookie at the network edge to distinguish humans from automated traffic. See Cloudflare’s cookie policy.

3. Analytics & advertising

We do not use Google Analytics, Meta Pixel, advertising cookies, or any cross-site tracking technology. We do not embed third-party ad scripts.

4. How to disable cookies

You can clear cookies and local storage from your browser settings at any time. Disabling the pf_token session cookie will sign you out and prevent re-authentication.

5. Do Not Track

Most browsers send a “Do Not Track” signal. Because Soliloquy does not run cross-site tracking in the first place, our behavior is the same whether DNT is on or off.

6. Changes

We’ll update the “Effective” date and post a notice in the cockpit when material changes are made.

7. Contact

support@trysoliloquy.com · Discord Azodan

Made with Emergent