Cookie Policy

Last updated: October 4, 2026 · Operated by Alvin AI Lab (alvinailab.com)

Essential cookies

• session_token — signed sign-in token (HttpOnly, SameSite=Strict, Secure in production). Lasts 24 hours, or 30 days if you choose “keep me signed in”.
• oauth_state — short-lived (10 minutes) anti-forgery token used only during Google/GitHub sign-in.
• session — holds the CSRF token for forms.

Local storage

• Your cookie choice and the last episode you watched per title, stored only in your browser.

Third parties

When you play a YouTube trailer, YouTube may set its own cookies. We use youtube-nocookie.com embeds to minimise this. We do not use advertising cookies.