Cookie Policy

1. What cookies are

Cookies are small pieces of data a website asks your browser to store and send back on later requests. We use them only to operate and secure the service, not to build advertising profiles.

2. Cookies we use

• Session cookie: an HttpOnly, secure cookie that keeps a business user signed in. It references a server-side session record that can be revoked (for example on logout); it does not itself contain your password.
• CSRF cookie: a companion cookie and matching request token used together to confirm that state-changing requests (like saving business knowledge or sending a reply) actually came from your own signed-in session.

Both are strictly necessary for the service to function -- there is no way to stay signed in or safely submit changes without them. The repository does not currently set advertising, cross-site tracking, or third-party analytics cookies.

3. Cookies set by others

When you connect an Instagram professional account, you are redirected to Meta to authorize the connection. Meta (not us) controls that page and may set its own cookies under its own privacy practices; we do not receive or control those cookies. The same applies to any other third-party page you visit from a link in the service.

4. Managing cookies

Most browsers let you view, block, or delete cookies in their settings. Because our session and CSRF cookies are required for authentication, blocking or deleting them will sign you out and prevent the service from working until you sign in again.

5. Changes to this policy

We may update this policy as the service or the cookies it uses change. We will post the updated policy here and revise the effective date.

6. Contact

Questions about this Cookie Policy may be sent through the support contact provided to your business account.