Cookie policy

Last updated: 25 September 2026

Required cookies are used for the panel session. No advertising or tracking cookies are set.

Cookies we use

• Session cookie — keeps the panel open after sign-in. HttpOnly, SameSite=Lax. Default idle lifetime is 120 minutes. It ends on sign-out or expiry.
• XSRF-TOKEN — protects form and Livewire requests from being sent by a fake site. JavaScript can read it; the session cookie cannot be read.
• Live page (Livewire) — panel components talk with the same session and CSRF; they do not add a separate tracking cookie.
• locale — your language preference. HttpOnly, SameSite=Lax, one year. It stays in sync with the locale value in localStorage. It is not used for ads or tracking.

API, MCP, and docs

The company API and MCP use bearer tokens, not cookies. The access token is not written to the browser; it is stored on your server.

Scripts for /docs/api come from this site. Docs and the panel share the site: if you open docs while signed in, your session cookie goes to that tab. It is safer to open docs after signing out.

Storage

The session ends when you sign out or it expires. You can delete cookies in the browser; then you must sign in again.

This text explains how AgentGunes works; it is not legal advice. Questions go through the contact email on your panel account.