Cookie Notice

Updated 15 September 2026

This application uses an essential owner-session cookie to keep the organiser signed in. It does not add advertising or analytics cookies.

Owner session

On the production HTTPS site, the cookie is named __Host-listerman_owner. It lasts up to eight hours and is removed when you sign out. It is restricted to secure connections and cannot be read by page scripts. It is needed for the sign-in feature you request, rather than advertising or tracking.

List organiser access

When you create a list without an account, giftrilo_organiser stores a random private access token for up to one year. It is an essential first-party HttpOnly cookie, restricted to HTTPS in production. We store its hash with your lists. Deleting it or using another browser removes organiser access in that browser; participant invitations do not restore it. Contact office@mondroid.pl for help; recovery requires verification and is not guaranteed.

Optional account sign-in

giftrilo_account is an essential HttpOnly session cookie lasting up to 30 days, restricted to HTTPS in production. Signing out invalidates it on the server. giftrilo_google_flow is an encrypted, essential sign-in cookie lasting up to 10 minutes, removed when sign-in returns. These cookies are created only for requested sign-in. Google sign-in redirects you to Google, which may use its own cookies. After lists are attached to an account, signing in with that same account restores access even if browser cookies were removed.

Language preference

When you select a language, listerman_language stores that choice for up to one year. This first-party preference cookie is used only to provide your requested language. Before you choose, we use your browser’s language preference.

Optional Google connection

Google connection software is loaded only after you choose Connect Google Tasks. Google may use its own cookies and account information for sign-in and authorisation. We do not store Google access tokens in cookies or local storage.

Participant links

Participant access is carried in the private part of the invitation URL. The browser sends it to our application when you use list features. Keep these links private and be careful on shared devices, where browser history may retain them.

Your controls

You can delete cookies through your browser settings. Deleting the owner cookie signs you out. A consent banner is not used for the essential session and requested language preference cookies. If we introduce optional technologies that require consent, we will explain them and ask before enabling them.

When you open an external shop or messenger, that provider may use its own cookies. See its cookie notice. Questions: office@mondroid.pl.