Cookie Policy
Effective date: April 26, 2026 · Last updated: April 26, 2026
This Cookie Policy explains how No Lodging or Fresh Baked Cookies, Inc., a South Dakota corporation ("we"), uses cookies and similar storage on the AirGenDec service ("Service").
The short version: we use a small set of strictly necessary cookies to keep you signed in and to protect against CSRF. We do not run advertising trackers, third-party analytics tags, or marketing pixels.
1. What are cookies?
Cookies are small data files placed on your device by websites you visit. They are widely used to make sites work efficiently, to remember preferences, and to authenticate users. We also use HTML local storage (a related browser-storage mechanism) for one or two non-sensitive preferences.
2. The cookies we set
| Name | Type | Purpose | Lifetime |
|---|---|---|---|
auth_token |
Strictly necessary | Pilot session — signed JWT identifying your account after sign-in. HttpOnly, Secure, SameSite=Lax. | 7 days |
fbo_auth_token |
Strictly necessary | FBO session — same purpose as auth_token, for fixed-base-operator accounts. |
7 days |
| Starlette session cookie | Strictly necessary | Holds OAuth state during the Google sign-in flow (CSRF protection). HttpOnly, encrypted. | Session |
3. Local storage
| Key | Purpose |
|---|---|
theme | Remembers your dark/light theme preference. |
cookie-banner-dismissed | Whether you have dismissed the cookie notice on this device. |
4. Third-party cookies
When you visit pages provided by third parties as part of using the Service, those third parties may set their own cookies under their own privacy policies. Specifically:
- Stripe — when you complete a checkout flow on Stripe's hosted Checkout page or open the customer portal, Stripe sets cookies on its own domains. See Stripe's cookie policy.
- Google — when you sign in with Google, Google may set cookies on its own domains during the OAuth flow. See Google's cookie policy.
We do not control these third-party cookies and are not responsible for them.
5. Why we don't ask for opt-in consent
All cookies set directly by AirGenDec are strictly necessary for the Service to function — keeping you signed in and protecting against CSRF attacks. Under the EU ePrivacy Directive (Article 5(3)) and similar rules, strictly-necessary cookies do not require prior opt-in consent, only clear notice. We provide that notice through this page and through a banner on first visit.
If we ever add non-essential cookies (for example, analytics or marketing), we will update this policy and add an opt-in consent mechanism.
6. How to control cookies
Most browsers allow you to refuse or delete cookies through their settings. If you block the strictly-necessary cookies above, you will not be able to sign in or use the Service.
7. Changes to this policy
If our cookie use changes, we will update this page. The "Last updated" date at the top reflects the most recent revision.
8. Contact
Questions about this policy? Email airgendec@nolodging.com.