BROWSER STORAGE / EFFECTIVE 13 OCTOBER 2026
Your browser.
Your local draft.
Effective 13 October 2026. This notice explains browser storage used by NovaSoft Sites and related provider services.
Device drafts
The editor uses the IndexedDB database novasoft-sites-drafts for device projects, active-draft details, account-site links and publication retry records. These records stay in the browser until removed by browser settings or product actions; there is no automatic device-draft expiry. People using the same browser profile may be able to access them.
A device draft is not a verified cloud backup. Guest work stays on the device until the server acknowledges an account save. Before clearing browser data or changing devices, export important source and check the downloaded copy. Signing out does not erase device drafts.
Account sessions and preferences
When account features are active, the app uses a necessary Secure, HttpOnly, SameSite Strict, host-only __Host-novasoft.session_token cookie. Its configured session lifetime is one day. It supports sign-in and ownership checks and cannot be switched off while keeping a signed-in session.
The mobile editor uses session storage to remember that a phone notice was dismissed for the current browser session. The static marketing pages do not create editor drafts or an app session. The editor library is configured with telemetry off in the reviewed source.
Stripe, Cloudflare and other providers
Stripe Checkout and the customer portal open on Stripe’s origin and may use cookies or similar storage for payment, fraud prevention and operation. Cloudflare Turnstile on account signup and Grow customer forms loads a challenge script and may use browser signals for abuse prevention. Cloudflare also provides edge security and may set necessary security cookies. Review each provider’s own notices for its separate handling.
The public product does not enable optional advertising analytics or a marketing subscription. If we add optional tracking, we will update this notice and provide any choice required by law before activation. A customer site owner may separately link to other services; its own notice should address those choices.
Controls and consequences
Browser settings can block or clear cookies and local storage. Blocking necessary account storage can prevent sign-in; clearing IndexedDB can permanently remove unsaved device drafts. An account source export or server-acknowledged save can help preserve work, but a backup does not grant rights to publish content outside a plan.
Contact help@novasofttechnologies.com with a question about our storage. Provider cookie names and durations may change as their services change; their notices describe their separate handling.
