Cookie Policy
Date of last revision
1. What this covers
This policy lists the cookies and browser storage that stophy.dev and the Stophy dashboard use, and what each one is for. How we handle personal data is described in the Privacy Policy.
2. Signing in
When you sign in, Stophy sets a session cookie so the dashboard knows who you are. Its name starts with better-auth. Scripts on the page cannot read it, and it is sent only to Stophy.
A second cookie from the same sign-in system keeps a copy of your session for up to one minute, so we do not look it up on every request.
On stophy.dev these cookies are shared with its subdomains, so you stay signed in across them.
3. Analytics
We use PostHog to count visits and find errors, but only after you accept analytics cookies. It then stores a random identifier in a cookie whose name starts with ph_, and in your browser's local storage. The cookie lasts one year.
When you sign in, we link that identifier to your account. We do not record your screen or your keystrokes.
4. Settings we remember
The dashboard remembers whether its sidebar is open in a cookie named sidebar_state. It lasts seven days.
The dashboard also keeps a few notes in local storage: your onboarding answers, notices you have dismissed, whether you have seen the dashboard, and an invite code until you use it.
5. What we do not use
We do not use advertising cookies.
Some images on our pages load straight from YouTube and Google. We do not control any cookies those sites may set.
6. Cookies we set
Every cookie and browser storage item we set, what it does and how long it lasts:
- __Secure-better-auth.session_token
- Keeps you signed in
- How long: 7 days
- __Secure-better-auth.session_data
- Saves a copy of your session so we do not look it up on every request
- How long: 1 minute
- ph_ then a code, then _posthog
- Counts visits, only after you accept
- How long: 1 year
- sidebar_state
- Remembers if the dashboard sidebar is open
- How long: 7 days
- __ph_opt_in_out_ then a code, in local storage
- Remembers your cookie choice
- How long: Until you clear it
| Name | What it does | How long |
|---|---|---|
| __Secure-better-auth.session_token | Keeps you signed in | 7 days |
| __Secure-better-auth.session_data | Saves a copy of your session so we do not look it up on every request | 1 minute |
| ph_ then a code, then _posthog | Counts visits, only after you accept | 1 year |
| sidebar_state | Remembers if the dashboard sidebar is open | 7 days |
| __ph_opt_in_out_ then a code, in local storage | Remembers your cookie choice | Until you clear it |
7. Your choices
Use Cookie settings at the bottom of any page, or in the account menu in the dashboard, to accept or reject analytics cookies at any time.
You can block or delete cookies and local storage in your browser settings. Blocking the session cookie means you cannot sign in. The other items only remember your settings and count visits.
8. Changes to this policy
If this policy changes, the date at the top of this page changes with it.
9. Contact
Questions about cookies can be sent to support@stophy.dev.