Cookie Policy

Last updated: March 11, 2026

This policy explains what cookies and similar technologies LvlPulse uses, why we use them and how you can control them.

1. What Are Cookies?

Cookies are small text files placed on your device when you visit a website. They allow the site to remember your actions and preferences over a period of time, so you don't have to re-enter them whenever you come back or navigate between pages.

We also use localStorage — a browser-based mechanism similar to cookies that stores data locally on your device but is never transmitted to our servers.

2. Types of Cookies We Use

Strictly Necessary

Essential for the website to function. They include authentication tokens (so you stay logged in) and CSRF protection tokens for OAuth. Without these, the site cannot work. These cookies cannot be disabled.

Functional

Enable enhanced functionality, such as remembering your shopping cart between visits. Stored in localStorage, not transmitted to our servers.

Third-Party

Set by PayPal during the payment process for session management and fraud prevention. These are governed by PayPal's own Cookie Policy.

3. Cookies We Set

Name	Provider	Purpose	Duration	Type
token	LvlPulse	Authentication — stores your encrypted session token. HttpOnly, never accessible to JavaScript.	7 days	Necessary
oauth_state	LvlPulse	CSRF protection during Google OAuth login flow.	10 minutes	Necessary
oauth_token	LvlPulse	Temporary bridge token used to hydrate the client session after Google sign-in.	60 seconds	Necessary
cart (localStorage)	LvlPulse	Stores your shopping cart contents locally in the browser. Not a cookie, but a similar technology.	Until cleared	Functional
_paypal_*	PayPal	Payment session and fraud-prevention data set by the PayPal SDK during checkout.	Session / varies	Third-party

4. Managing & Disabling Cookies

You can control and manage cookies using your browser settings. Most browsers allow you to block, delete or restrict cookies. Here are links to cookie settings for common browsers:

Google Chrome: Settings → Privacy and Security → Cookies
Mozilla Firefox: Settings → Privacy & Security → Cookies and Site Data
Safari: Preferences → Privacy → Manage Website Data
Microsoft Edge: Settings → Cookies and Site Permissions

Please note that disabling strictly necessary cookies will prevent you from logging in or making purchases on LvlPulse.

5. Third-Party Cookie Policies

Third-party cookies placed by PayPal during checkout are governed by PayPal's own policies. We encourage you to review PayPal's Privacy Statement for details on their data practices.

6. Changes to This Policy

We may update this Cookie Policy from time to time to reflect changes in our practices or for legal or regulatory reasons. We will post the updated policy on this page with a revised "Last updated" date.

7. Contact

If you have questions about our use of cookies, contact us at contacto@nillapp.com.