ModunOS

Cookie Policy

How ModunOS uses cookies and similar technologies (including browser storage) on public faces and signed-in sessions — to keep you secure and signed in, not to sell attention as advertising.

Last updated: September 2026. Soft release — practices evolve as features harden; we will update this page when they do.

This page is the human-readable explanation of our cookie practices, plus the operative soft-release summary. It is a companion to our Privacy Policy (what ModunOS knows), not a substitute for it. It is not legal advice. Soft-release default: no first-party analytics or marketing cookies.

Who operates ModunOS

ModunOS is operated by Modun Systems (founder Charles Arden, United Kingdom). ModunOS / Modunos are product and website brands — not separate companies. Contact: [email protected] (general: [email protected]).

What we mean by “cookies”

We use HTTP cookies and similar technologies such as localStorage / sessionStorage where the product needs to remember a session, preference, or short-lived feature memory. Edge providers (for example Cloudflare) may also set cookies for security and delivery. This page covers all of those classes.

Essential

Security, session continuity, and abuse resistance — needed to run the service you request.

Functional

Light preferences and feature memory (theme, layout, guest AI turn memory) — not advertising.

Analytics

Not the soft-release default. We do not ship first-party product-analytics cookies today.

Marketing

Not shipped. We do not use advertising or retargeting cookies as a ModunOS default.

What we use today

Technology Purpose Category
Session JWT in localStorage (modun_citizen_pass / modun_vip_pass) Keep you signed in to ModunOS / AI faces Essential
modun_auth_token cookie (when set) Share auth across *.modunos.com subdomains Essential
UI / preference keys in localStorage Theme, layout, privacy toggles, app caches you use Functional
Void / Lucen local turn memory Recent guest or on-device conversation continuity Functional
Cloudflare / edge security cookies Bot management, Access, and delivery security Essential (infrastructure)
Stripe (Checkout / portal) Payment flows on Stripe-hosted pages Essential when you pay (processor)

Exact storage key names evolve with apps. We describe classes honestly rather than pretending every key is frozen forever. Details on what ModunOS knows about you live in the Privacy Policy.

What we do not use by default

If we introduce optional measurement later, we will update this page (and Privacy) and, where required, provide a real choice — we will not invent a preference toggle that does nothing.

How long things last

Session tokens last for the product’s session window (citizen JWTs are typically on the order of weeks unless you sign out or we rotate secrets). The shared auth cookie is set with a short multi-day lifetime when used. Preference and guest-memory keys persist until you clear site data or the product clears them. Edge cookies follow the provider’s security configuration. Soft-release automation for fixed per-cookie purge schedules is still maturing.

Your choices