Cookie Policy

Set when you sign in and cleared when you sign out. It holds an opaque session token — not your identity or any project data — and is how the server knows which account a request belongs to. Strictly necessary; the product cannot work without it.

A short-lived, signed copy of your session details so that navigating between screens does not hit the database on every page. It expires within minutes and refreshes from the session above.

Stripe sets its own cookies on the hosted checkout and billing portal pages, which are on Stripe's domain rather than ours, for fraud prevention. Google sets cookies during the Google sign-in flow if you choose it.

You can clear or block cookies in your browser. Blocking the session cookie will sign you out and prevent you from signing back in, since there is no other way to hold a session.