Legal / Cookie Policy
Cookie Policy
Version: 1.0 Effective date: 2026-08-25 Last updated: 2026-08-25 Operator: Atomira Technologies, S.L. (CIF B27662717, C/ Lepant 270, Bajos, 08013 Barcelona, Spain)
1. What this Policy covers
This Cookie Policy explains how Writano (https://writano.com), operated by Atomira Technologies, S.L., uses cookies and similar technologies (collectively, “cookies”) on our website and Service.
This Policy is governed by:
- Article 22 of Ley 34/2002 (LSSI-CE) on cookies in Spain
- Regulation (EU) 2016/679 (GDPR)
- Ley Orgánica 3/2018 (LOPDGDD)
- AEPD Guidance on the use of cookies (latest revision)
- ePrivacy Directive 2002/58/EC
If you have questions, contact privacy@writano.com.
2. What are cookies?
Cookies are small text files placed on your device (computer, phone, tablet) by the websites you visit. They are widely used to make websites work, work more efficiently, and provide information to website operators.
This Policy also covers other client-side storage technologies that serve similar purposes, including:
- localStorage and sessionStorage (used by Writano for in-browser AI model caching, manuscript drafts, and editor state)
- IndexedDB (used to store quantized AI model weights locally and offline editor state)
- Pixel tags / web beacons (we do not currently use these)
- Server-side session tokens (functionally equivalent to cookies; covered by the same consent rules where consent is required)
For brevity, we refer to all of these collectively as “cookies” in this Policy.
3. Categories of cookies we use
We use the following categories, in line with the AEPD’s cookie classification:
3.1 Strictly necessary cookies (technical / functional core)
These are required for the Service to function and do not require your consent (LSSI-CE Art. 22.2, second-paragraph exception). They include:
- Authentication and session cookies (so you stay logged in)
- CSRF protection tokens
- Load-balancing and routing cookies
- Cookies that store your cookie-consent choice itself
Disabling these cookies will prevent the Service from working.
3.2 Functional cookies
These remember your preferences and choices (language, theme, editor settings). They make your experience more comfortable but are not strictly required. They are activated only with your consent.
3.3 Analytics cookies
These help us understand how visitors interact with the Service so we can improve it. Activated only with your consent.
Our default analytics solution is configured to be privacy-respecting:
- No third-party advertising trackers
- No cross-site user profiling
- Where possible, no cookies at all (cookieless analytics via self-hosted Plausible)
- Where cookies are used, they are first-party only, with no PII
3.4 We do NOT use
- Advertising / marketing cookies — Writano does not display ads and does not place advertising trackers
- Third-party social-media tracking pixels (Facebook Pixel, TikTok, etc.)
- Cross-site tracking for behavioral profiling
- Cookies from data brokers
4. Specific cookies used by Writano
Verified against the application source on 2026-08-16. If we add or remove a cookie, this table is updated at the same time.
4.1 Strictly necessary (no consent required)
| Name | Purpose | Domain | Duration | Type |
|---|---|---|---|---|
next-auth.session-token (__Secure- prefixed over HTTPS) |
Keeps you signed in | writano.com | 7 days | First-party HTTP cookie |
next-auth.csrf-token |
Protects sign-in forms against cross-site request forgery | writano.com | Session | First-party HTTP cookie |
next-auth.callback-url |
Returns you to the page you were on after signing in | writano.com | Session | First-party HTTP cookie |
gh_oauth_state |
One-time value that ties a GitHub sign-in back to the browser that started it | writano.com | Minutes (single use) | First-party HTTP cookie |
maintenance_bypass |
Lets an authorised tester reach the app during maintenance | writano.com | Until maintenance ends | First-party HTTP cookie |
__stripe_mid, __stripe_sid |
Payment fraud prevention, set by Stripe on pages that load their payment library | js.stripe.com / checkout.stripe.com | Up to 1 year / 30 minutes | Third-party (Stripe) |
4.2 Functional
Writano stores its interface preferences in your browser’s local storage, not in cookies. Nothing in this section is transmitted to us; it stays on your device until you clear it.
| Name | Purpose |
|---|---|
writano-prefs |
Theme and editor preferences |
writano-landing-theme |
Light/dark choice on the public website |
writano-sidebar, writano-panel-ratio |
Panel layout |
writano-open-tabs, writano-active-project |
Restores the documents and project you had open |
writano-projects-view, writano-papers-view |
Grid or list preference |
writano-bookmarked-papers |
Papers you bookmarked |
writano-pending-citation, writano-pending-figure |
Carries a citation or figure across to the editor |
dismissedAnnouncements |
Remembers which notices you have closed |
4.3 Local storage and offline data
| Name | Purpose | Storage |
|---|---|---|
| AI model weights | Stores downloaded models so in-browser AI works without sending your text anywhere | IndexedDB |
| Offline document cache | Local copies of your documents so the editor works without a connection | IndexedDB |
These never leave your device and are not used for tracking.
4.4 Analytics
Writano sets no analytics or advertising cookies. We do not use Google Analytics, advertising pixels, or cross-site trackers. If that ever changes, this policy will be updated and your consent requested first.
5. How we ask for and manage your consent
When you first visit writano.com, you will see a cookie banner that:
- Clearly explains the categories of cookies
- Allows you to accept all, reject all (non-essential), or customize category-by-category
- Provides equal-weight buttons for accept and reject (no “dark patterns”) — in line with AEPD enforcement guidance
- Does not pre-tick any consent boxes
- Does not place non-essential cookies until you have given consent
- Records your choice and the timestamp for audit purposes
You can change your cookie preferences at any time via:
- The “Cookie preferences” link in our website footer
- Your account settings, where applicable
6. Third-party cookies
Some cookies are set by third parties when you interact with parts of the Service that integrate with their infrastructure:
| Third party | When set | What they do | Their privacy info |
|---|---|---|---|
| Stripe | When you reach a payment / checkout page | Fraud prevention for payment processing | https://stripe.com/cookie-settings |
| If you sign in with Google | Authentication only | https://policies.google.com/technologies/cookies | |
| GitHub | If you sign in with GitHub | Authentication only | https://docs.github.com/site-policy/privacy-policies/github-privacy-statement |
We do not control third-party cookies directly. To control or opt out, refer to the third party’s policy or your browser settings.
7. Managing cookies through your browser
You can also control cookies through your browser settings. Most browsers allow you to:
- See what cookies have been set
- Delete some or all cookies
- Block all cookies (which will break login and other essential features)
- Block third-party cookies (recommended)
Browser-specific guides:
- Chrome: https://support.google.com/chrome/answer/95647
- Firefox: https://support.mozilla.org/en-US/kb/cookies-information-websites-store-on-your-computer
- Safari: https://support.apple.com/guide/safari/manage-cookies-sfri11471/mac
- Edge: https://support.microsoft.com/en-us/microsoft-edge/
Note: blocking strictly-necessary cookies will prevent the Service from working correctly. We do not encourage blocking these.
Do Not Track
We respect the “Do Not Track” (DNT) signal where technically feasible. If your browser sends DNT, our analytics will be disabled by default for your session.
Global Privacy Control (GPC)
We honor Global Privacy Control (GPC) signals where applicable.
8. Cookies and your data rights
Cookie consent and management is governed by GDPR + LSSI-CE. Your rights under those laws (access, rectification, erasure, etc.) are explained in our Privacy Policy (writano.com/privacy).
In particular:
- Right to withdraw consent: you can withdraw your cookie consent at any time via the cookie preferences link. Past processing remains lawful.
- Right to lodge a complaint: with the AEPD (https://www.aepd.es) if you believe our cookie practices violate Spanish law.
9. Updates to this Policy
We may update this Cookie Policy from time to time. Material changes will:
- Be posted at writano.com/cookies with at least 30 days advance notice
- Trigger a re-consent prompt for users where new cookie categories or new third-party processors are introduced
- Be reflected in the document history below
10. Contact
- Privacy questions: privacy@writano.com
- General contact: hello@writano.com
- Post: Atomira Technologies, S.L., C/ Lepant 270, Bajos, 08013 Barcelona, Spain
For independent review: AEPD (https://www.aepd.es).
Document history
| Version | Date | Change |
|---|---|---|
| 1.0 | 2026-08-25 | Initial public release. |
Questions about cookies? Email legal@writano.com.