Legal

Cookie policy

Last updated 1 November 2026

How Brainyo uses cookies and similar browser storage, why we use them, how long they last and the choices you have.

1. Introduction

This policy covers the cookies and similar technologies used on aiproxy.gr, in the Brainyo app at dashboard.aiproxy.gr and on our sign-in pages at auth.aiproxy.gr.

A cookie is a small text file that a website saves in your browser. Your browser's local storage and session storage work in a similar way, so this policy covers them too. Below, “cookies” means all of them.

In short: we use cookies to keep you signed in, to keep the service secure and to remember your settings. We do not use analytics or advertising cookies.

Section 8 lists every cookie and storage item by name.

2. Who we are

Brainyo is operated by AIProxy (“we”, “us”). We decide which cookies Brainyo uses and why, and we are the controller of any personal data they hold, under the EU General Data Protection Regulation (GDPR).

Contact: hello@aiproxy.gr.

3. How we use cookies

We group our cookies by what they are for. Each group below says why we use it, the legal basis, how long the cookies last and who else is involved.

3.1 Strictly necessary cookies

Why we use them. They keep you signed in, protect the sign-in step and your session, and remember your cookie choice. Brainyo cannot work without them, so they are always on.

Legal basis. These cookies do not need your consent, because they are strictly necessary to provide the service you ask for (Article 5(3) of the ePrivacy Directive, which Greece implements in Article 4(5) of Law 3471/2006). Where they hold personal data, such as your sign-in session, we use it to provide your account (Article 6(1)(b) GDPR) and to keep Brainyo secure (Article 6(1)(f) GDPR).

How long. From 90 seconds up to 30 days. Most end when you sign out or your sign-in session expires. The cookie that remembers your cookie choice lasts 180 days.

Third parties. None for the cookies themselves. Brainyo sets these cookies itself, on aiproxy.gr and its subdomains. That includes our sign-in service at auth.aiproxy.gr, which we run ourselves. The one third party on these pages is Google reCAPTCHA on the registration page, described below and in section 5.

The sign-in, password-reset and account pages on auth.aiproxy.gr load their fonts, styles and images only from auth.aiproxy.gr, and load no third-party resources. The registration page uses Google reCAPTCHA to protect against automated sign-ups. It loads a script and a font from Google and may send technical data, such as your IP address and browser information, to Google. See Google's privacy policy (policies.google.com/privacy).

3.2 Preferences stored in your browser

Why we use them. They remember settings you choose in the app, such as light or dark mode, your last workspace, list or grid view and your recent searches, so you do not have to set them again. They are kept in your browser's local storage or session storage.

Legal basis. They do not need your consent, because they only store what you asked Brainyo to remember (Article 5(3) of the ePrivacy Directive and Article 4(5) of Law 3471/2006). We do not use them to track you.

How long. Items in local storage stay until you clear your browser's data for our site. Items in session storage are deleted when you close the tab.

Third parties. None. They stay in your browser and are not sent to us, except your current workspace, which the app sends to our servers so they know which workspace you are working in.

3.3 Analytics

Not in use today. Brainyo does not set analytics cookies at the moment.

If this changes. We would use analytics cookies only on our public pages, never inside the app, and only after you agree. We would update this policy and ask for your consent first.

3.4 Services you choose to use

Why we use them. When Google Drive import is available, the upload page, and documents you imported from Google Drive, load Google's sign-in and file-picker scripts so you can choose files from your Drive. Brainyo sets no cookie for this.

Legal basis. We load them to provide a feature of your Brainyo account (Article 6(1)(b) GDPR). If you sign in to Google to pick files, Google's own cookie policy applies to the cookies Google sets.

How long. The scripts run only while the page is open.

Third parties. Google. Google receives your IP address and browser details when the scripts load, and may process them in the United States (section 5).

4. Your choices

Cookie settings. Brainyo uses only strictly necessary cookies and preferences today, so there is nothing to switch on or off. Cookie settings, below, in the site footer and in the app's menu, shows what is in use.

Your browser. You can also block or delete cookies and site data in your browser's settings. If you block strictly necessary cookies, you cannot sign in to Brainyo. If you clear our site's data, your preferences go back to their defaults.

5. Third parties and international transfers

Our own cookies. We set the strictly necessary cookies and the preferences ourselves. What they hold goes only to our own servers.

Google reCAPTCHA. Our registration page uses Google reCAPTCHA to protect against automated sign-ups. It loads a script and a font from Google, so Google receives your IP address and browser details and may process them in the United States. See Google's privacy policy. Our privacy policy explains how such transfers are protected.

Google Drive import. When Google Drive import is available, Google's scripts load from Google's servers on the pages named in section 3.4, so Google receives your IP address and browser details and may process them in the United States. Our privacy policy explains how such transfers are protected.

Our privacy policy lists the providers that handle personal data for Brainyo.

6. Changes to this policy

We update this policy when the cookies we use change. The date at the top of the page shows when it last changed.

If we start using a new kind of cookie that needs your consent, we will ask you again before we use it.

This version. 1 November 2026.

7. Contact and complaints

Questions about this policy or your cookie choice: write to hello@aiproxy.gr. We reply within one month.

If you think we handle your personal data unlawfully, you can complain to the Hellenic Data Protection Authority (www.dpa.gr), or to the data protection authority in the EU country where you live or work. We would appreciate the chance to put things right first.

Our privacy policy explains how we handle personal data and the rights you have.

8. Appendix: cookies and storage we use

Every cookie and browser-storage item Brainyo uses, grouped as in section 3. A part in square brackets, such as [accountId], stands for a value that differs for each user.

8.1 Strictly necessary cookies

Name	Set by	Purpose	Duration	Type
brainy_session	Brainyo	Keeps you signed in on this device.	30 minutes	Cookie, httpOnly
brainy_session_bootstrap	Brainyo	Completes sign-in on the first page load.	90 seconds	Cookie, httpOnly
brainy_at	Brainyo	Holds your short-lived access token.	30 minutes	Cookie, httpOnly
brainy_rt	Brainyo	Renews your session without asking you to sign in again.	Until your sign-in session ends, at most 30 days	Cookie, httpOnly
user	Brainyo	Shows your name, email and role in the app.	30 minutes	Cookie
brainy_consent	Brainyo	Remembers your cookie choice.	180 days	Cookie
AUTH_SESSION_ID, KC_AUTH_SESSION_HASH, KC_RESTART	Brainyo sign-in (auth.aiproxy.gr)	Protect the sign-in step while you log in.	Session	Cookie
KEYCLOAK_IDENTITY, KEYCLOAK_SESSION	Brainyo sign-in (auth.aiproxy.gr)	Keep your sign-in session.	Until your sign-in session ends, at most 10 hours	Cookie

brainy_session

Set by: Brainyo
Purpose: Keeps you signed in on this device.
Duration: 30 minutes
Type: Cookie, httpOnly

brainy_session_bootstrap

Set by: Brainyo
Purpose: Completes sign-in on the first page load.
Duration: 90 seconds
Type: Cookie, httpOnly

brainy_at

Set by: Brainyo
Purpose: Holds your short-lived access token.
Duration: 30 minutes
Type: Cookie, httpOnly

brainy_rt

Set by: Brainyo
Purpose: Renews your session without asking you to sign in again.
Duration: Until your sign-in session ends, at most 30 days
Type: Cookie, httpOnly

user

Set by: Brainyo
Purpose: Shows your name, email and role in the app.
Duration: 30 minutes
Type: Cookie

brainy_consent

Set by: Brainyo
Purpose: Remembers your cookie choice.
Duration: 180 days
Type: Cookie

AUTH_SESSION_ID, KC_AUTH_SESSION_HASH, KC_RESTART

Set by: Brainyo sign-in (auth.aiproxy.gr)
Purpose: Protect the sign-in step while you log in.
Duration: Session
Type: Cookie

KEYCLOAK_IDENTITY, KEYCLOAK_SESSION

Set by: Brainyo sign-in (auth.aiproxy.gr)
Purpose: Keep your sign-in session.
Duration: Until your sign-in session ends, at most 10 hours
Type: Cookie

8.2 Preferences stored in your browser

Name	Set by	Purpose	Duration	Type
theme	Brainyo	Remembers light or dark mode.	Until you clear it	Local storage
brainy.workspace.[accountId]	Brainyo	Remembers your last workspace.	Until you clear it	Local storage
brainy.beta-banner.dismissed	Brainyo	Remembers that you closed the beta notice.	Until you clear it	Local storage
docs-view-mode	Brainyo	Remembers list or grid view in Documents.	Until you clear it	Local storage
recentSearches	Brainyo	Lists your recent searches on this device.	Until you clear it	Local storage
brainy.graph.introSeen, brainy.graph.showSuggested	Brainyo	Remember your choices in the knowledge graph.	Until you clear it	Local storage
brainy.chat.sourceMode	Brainyo	Remembers your source setting in chat.	Until you clear it	Local storage
brainy_notifications_read_upto:[userId]	Brainyo	Remembers which notifications you have read.	Until you clear it	Local storage
brainy_notifications_v5:[userId]	Brainyo	Keeps your notification list while the tab is open.	Until you close the tab	Session storage

theme

Set by: Brainyo
Purpose: Remembers light or dark mode.
Duration: Until you clear it
Type: Local storage

brainy.workspace.[accountId]

Set by: Brainyo
Purpose: Remembers your last workspace.
Duration: Until you clear it
Type: Local storage

brainy.beta-banner.dismissed

Set by: Brainyo
Purpose: Remembers that you closed the beta notice.
Duration: Until you clear it
Type: Local storage

docs-view-mode

Set by: Brainyo
Purpose: Remembers list or grid view in Documents.
Duration: Until you clear it
Type: Local storage

recentSearches

Set by: Brainyo
Purpose: Lists your recent searches on this device.
Duration: Until you clear it
Type: Local storage

brainy.graph.introSeen, brainy.graph.showSuggested

Set by: Brainyo
Purpose: Remember your choices in the knowledge graph.
Duration: Until you clear it
Type: Local storage

brainy.chat.sourceMode

Set by: Brainyo
Purpose: Remembers your source setting in chat.
Duration: Until you clear it
Type: Local storage

brainy_notifications_read_upto:[userId]

Set by: Brainyo
Purpose: Remembers which notifications you have read.
Duration: Until you clear it
Type: Local storage

brainy_notifications_v5:[userId]

Set by: Brainyo
Purpose: Keeps your notification list while the tab is open.
Duration: Until you close the tab
Type: Session storage

8.3 Analytics

Analytics is not in use on Brainyo at the moment, so no analytics cookies are set.

8.4 Services you choose to use

Name	Set by	Purpose	Duration	Type
Google Drive import scripts	Google	Load Google's sign-in and file picker when you import from Google Drive.	While the page is open	Script

Google Drive import scripts

Set by: Google
Purpose: Load Google's sign-in and file picker when you import from Google Drive.
Duration: While the page is open
Type: Script