Cookie Policy
Last updated: January 2026
Template notice: this page is a starter baseline and should be reviewed/updated based on the cookies and tools you actually enable.
Cookies are small text files stored on your device. We use necessary cookies to run core features (like authentication and security). Optional cookies (like analytics or marketing) are only used if you consent.
Cookie categories
- Necessary: required for authentication, security, and core features.
- Preferences: remember settings (for example theme or language).
- Analytics: understand usage and improve the product (opt‑in).
- Marketing: measure or personalize marketing campaigns (opt‑in).
Cookies we use
| Name | Category | Purpose | Duration | Provider |
|---|---|---|---|---|
| cookie_consent | necessary | Stores your cookie consent preferences. | 180 days | First-party |
| refresh_token HttpOnly | necessary | Authentication session cookie used for refresh token rotation. | Up to 30 days (configurable) | First-party |
| oauth_state HttpOnly | necessary | OAuth security (state/CSRF protection) during sign-in. | 10 minutes | First-party |
This app uses Vercel Analytics (cookieless) for basic usage statistics. Optional third-party cookies depend on which additional analytics/marketing tools you enable. If you add tools like Google Analytics, update this page to list their cookies (for example _ga, _gid).
Consent in this template
This template stores cookie choices in the cookie_consent cookie. By default, no optional categories are enabled until you choose “Accept all” or save a custom selection.
Optional scripts should be loaded only after consent. An example is included for Google Analytics (gated by the Analytics toggle).
Local storage
Some features may store preferences in local storage (for example theme settings via next-themes). Treat these as “preferences” storage and document any additional keys you add.
Third-party services
Vercel Analytics
We use Vercel Analytics to collect anonymous usage statistics and improve the user experience. This service is privacy-focused and does not use cookies or track personal information.
- Purpose: Web analytics and performance monitoring
- Data collected: Page views, referrers, device type, country (based on IP address)
- Cookies: None (cookieless tracking)
- Privacy: GDPR-compliant, does not collect personal identifiable information
- Category: Analytics (optional, requires consent)
Learn more: Vercel Analytics Privacy Policy
If you enable additional third‑party analytics or marketing tools (like Google Analytics), list each provider here, including cookie names, purposes, and retention. Ensure you only enable these tools after consent where required.
Managing cookies
You can change your cookie preferences anytime via the Cookie settings button. You can also manage cookies through your browser settings (which may block necessary cookies and break sign-in).