Cookie Policy
Last updated: October 2026
1. What this policy covers
This Cookie Policy explains what cookies and similar technologies Lmura uses, why we use them, and the choices you have. Capitalized terms used but not defined here have the meanings given in our Privacy Policy. In this policy, “cookies” also covers functionally similar storage such as your browser’s local storage.
2. What cookies and similar technologies are
Cookies are small pieces of text that websites store on your device to remember information — for example keeping you logged in. Local storage works similarly but is only readable by the site that saved it. You can learn how cookies work in general at knowcookies.com.
3. Strictly Necessary — always on
These are required for security and core functionality and cannot be turned off. Blocking them will prevent you from logging in or using your account:
- lmura_token — Keeps you logged in. HttpOnly, Secure, deleted on logout or expiry.
- csrf_token — Protects forms against forgery attacks.
- Cloudflare security cookies — Bot and abuse protection (e.g. _cf_bm) while traffic is filtered.
4. Functional — your preferences
These remember choices you make so the site behaves the way you left it. They live in your browser’s local storage (not cookies) and are only readable by Lmura. Clearing them simply resets everything to defaults:
- Interface preferences — Sidebar state and currency choice, stored locally.
- Language — Remembered via the address (/ar, /fr…) — no cookie involved.
5. Performance and analytics
These help us understand aggregate usage so we can improve Lmura. They are first-party only — nothing is shared with advertisers or data brokers:
- Simple Analytics — Privacy-first visit statistics. Sets no cookies at all.
- Portfolio view counts — A first-party visitor ID counts views of public portfolios for their owners. Aggregate only, never shared or sold, no cross-site tracking.
6. Advertising and targeting
We do not use advertising or targeting cookies. There are no ad pixels, no cross-site trackers, and we do not sell personal information. This section exists so you do not have to take our word for it — you can verify it in your browser’s developer tools.
7. Third parties
Only three outside providers ever touch your browser, each for the single purpose listed:
- Cloudflare — Security and delivery. Privacy policy.
- Simple Analytics — Cookieless analytics. Privacy policy.
- Polar — Payment processing, only when you check out. Privacy policy.
8. Managing your choices
You can change your choices at any time from the “Cookie Preferences” link in the footer, which re-opens the preferences panel. You can also control or delete storage through your browser settings — blocking Strictly Necessary storage will log you out and prevent login, while declining Functional or Analytics storage only resets preferences and pauses measurement.
9. How long things are kept
The login session ends when you log out or when it expires. Interface preferences persist until you clear them. Analytics are kept as aggregate dashboard statistics for portfolio owners.
10. Contact
For questions about this policy, contact us at [email protected].