Chapara

Cookie Policy

Last updated: 25 July 2026

This policy explains what Chapara stores in your browser. Everything listed here is strictly necessary — it is needed for the parts of the service you asked for. Under UK PECR that means we do not need your prior consent, but we disclose it anyway.

Cookies we use

  • chapara_session — keeps you signed in. It holds a random session token (our servers keep only a hash of it), is HttpOnly, SameSite and Secure in production, and expires when your session ends.
  • chapara_oauth — set only while you are signing in with Google. It carries the security values that protect the sign-in exchange from tampering, and is deleted as soon as you land back on Chapara.
  • chapara_oauth_signup — set only if you are creating a new account with Google, so we can carry your verified email across to the registration form without putting it in the address bar. It is single-use and expires after 10 minutes.

Other things stored in your browser

These are not cookies — they stay on your device and are never sent to our servers. They only stop us asking you the same thing repeatedly:

  • rr_cookie_notice — remembers that you dismissed the cookie notice.
  • chapara-install-dismissed— remembers that you dismissed the "add to home screen" prompt.
  • chapara-push-prompt-dismissed — remembers that you dismissed the notifications prompt, so we wait a couple of weeks before asking again.

Clearing your browser's site data removes all of these.

What we do not use

We use no advertising, analytics or tracking cookies, and we do not sell personal data. We do not track you across other websites. Scanning a Chapara QR code sets nothing on your device — see our Privacy Policy for what a scan does record. Our error monitoring is configured to strip personal data and sets no tracking cookies. If we ever introduce a non-essential cookie, we will ask for your consent first and update this policy.

Managing cookies

Because the session cookie is essential to signing in, blocking it will prevent the service from working. You can clear cookies via your browser settings at any time.

More information

See our Privacy Policy for how we handle personal data, or contact us with questions.