Cookie Policy
Effective Date: 2026-09-25 Last Updated: 2026-10-10
Every cookie and browser-storage entry Legalyard AI sets, what each is for, how long it lasts, and how to change your choices.
1. What this policy covers
This policy explains the cookies and similar browser-storage technologies that Innvoq Labs LLP ("Legalyard", "we", "our", or "us") uses on Legalyard AI at legalyard.ai (the "Service"). It supplements our Privacy Policy, which describes the personal data we process and your rights.
A cookie is a small text file a website stores in your browser. Session storage and local storage are similar browser features that hold a value without sending it to us with every request. The mobile apps do not use cookies; they hold your sign-in session in the device's secure storage.
2. Cookies we set ourselves
We set a deliberately small number of cookies. This is the complete list.
Strictly necessary
These sign you in and protect your session. They are always set when you use the Service and cannot be switched off, because the Service does not work without them.
| Cookie | Purpose | Lifetime |
|---|---|---|
| legalyard-consumer.session-token (or __Secure-legalyard-consumer.session-token on secure connections) | Holds your signed-in session. Not readable by scripts. | 24 hours |
| legalyard-consumer.callback-url | Remembers the page to return you to after sign-in. | Sign-in flow |
| legalyard-consumer.csrf-token | Protects sign-in against request forgery. Not readable by scripts. | 24 hours |
Functional
| Cookie | Purpose | Lifetime |
|---|---|---|
| ly_ai_locale | Your chosen interface language. | 1 year |
| ly_ai_lang_suggested | Records that we have already offered you a language suggestion, so we do not repeat it. | 1 year |
Consent record
| Cookie | Purpose | Lifetime |
|---|---|---|
| ly_platform | Stores the category choices you made in the consent banner, when you made them, and a pseudonymous visitor identifier. The identifier is derived from characteristics of your browser (its user-agent string, time zone, and screen size) so that the choice you recorded can be matched to the record we keep of it; it is not used to track you across sites. | 365 days |
Analytics (session storage, not a cookie)
| Entry | Purpose | Lifetime |
|---|---|---|
| ly.sid (session storage) | A random identifier for our own first-party product analytics, so events from one visit can be grouped. It is not a cookie, is not sent automatically with requests, and is discarded when you close the tab. | Until you close the tab |
We use no third-party analytics service and set no advertising or cross-site tracking cookies.
3. Third-party scripts that set their own cookies
A few pages load a script from another company to do one job. Each may set its own cookies under its own policy, and only on the page that loads it:
- Cloudflare Turnstile — bot protection on the sign-in and waitlist forms. Cloudflare's privacy policy applies to the cookies it sets.
- Google sign-in — the sign-in page loads Google's identity script to offer "Sign in with Google". Google's privacy policy applies.
- Paddle checkout — on the checkout page, outside India, Paddle's checkout overlay takes your payment. Paddle's privacy policy applies.
- Razorpay checkout — on the checkout page, in India, Razorpay's checkout takes your payment. Razorpay's privacy policy applies.
A tag-management container can be loaded on public (signed-out) pages only if we configure one, and only after you have chosen the Analytics or Marketing category in the consent banner. No container is configured today, so nothing of the kind loads. Signed-in pages never load advertising or marketing tags.
4. The consent banner
Where the law requires it, the consent banner asks you to choose before non-essential categories are used. The categories offered are:
- Strictly necessary / Functional — always on; the Service does not work without them.
- Analytics — our own first-party product analytics.
- Marketing — whether you want product news and launch announcements by email. No marketing cookies are set today; this category controls email, and is reserved for any future marketing tag, which we would list in this policy before using it.
If your browser sends a Global Privacy Control signal, we treat it as a refusal of the Analytics and Marketing categories.
5. Changing your choices
- Signed in: Settings → Privacy → Consent lets you change any category at any time.
- Signed out: clear the ly_platform cookie in your browser and the banner will ask again on your next visit.
- Your browser's own settings can block or delete cookies. Blocking the strictly necessary cookies will prevent you from signing in.
6. Changes to this policy
We will update this policy before we set a new cookie or load a new third-party script, and the version and dates at the top will change.
7. Contact
Innvoq Labs LLP, WeWork 247 Park, Vikhroli, Mumbai, MH, IN-400079
- Privacy. privacy@email.legalyard.com
- Data Protection Officer. dpo@email.legalyard.com
See: Privacy Policy