Cookie Policy.
Last updated: October 2026 · Strictly essential cookies only
Essential Authentication Cookies
We use strictly-necessary session cookies (better-auth.session_token and __Host-session) to maintain secure, authenticated sessions.
- HttpOnly: Inaccessible to client JavaScript, mitigating Cross-Site Scripting (XSS) risks.
- Secure: Transmitted exclusively over encrypted HTTPS connections.
- SameSite=Lax: Prevents unauthorized Cross-Site Request Forgery (CSRF).
- Lifespan: Automatically invalidated after 30 days of inactivity or upon explicit logout.
Zero Third-Party Advertising Trackers
We do not deploy third-party advertising pixels, cross-site trackers, or data broker cookies. We believe your usage telemetry belongs strictly between your team and our platform.