Legal

Cookie Policy

Last updated · 19 September 2026

What we use

This marketing site sets no cookies. Not one — no analytics, no advertising, no cross-site tracking, and no third-party scripts that could set them on our behalf. You can check it yourself in your browser's storage inspector.

The client application at getnallo.ai/app sets exactly one:

  • nallo_session — keeps you logged in. HttpOnly, Secure, SameSite=Lax, thirty days. It holds a random token, not your identity: the server stores only a hash of it, so a copy of our database yields no usable session.

Local storage

The application also keeps three things in your browser's local storage: your theme, whether the ambient animation is on, and how you arranged your dashboard. They never leave your device and are never sent to us.

Clearing your browser data removes them. You lose your layout, nothing else.

A banner exists to collect consent for storage that is not strictly necessary. We have none. A session cookie you asked for by logging in, and a theme you chose yourself, are exempt under Article 5(3) of the ePrivacy Directive and the CNIL's délibération 2020-091.

We used to show one anyway. It asked permission for analytics we had never installed — so it was removed rather than left to describe a product that did not exist.

Your control

Logging out deletes the session cookie immediately. So does clearing site data in your browser.

There is nothing else to refuse. If that ever changes, this page changes first and the choice comes before the storage, not after.

Third parties

Stripe sets cookies on the checkout page it hosts, governed by its own policy. We set none on your customers' stores beyond what you configure there yourself.