Cookies

1. Cookies we set

authjs.session-token: keeps you signed in. Expires after 30 days or when you sign out.

authjs.csrf-token: protects sign-in forms against cross-site request forgery. Session length.

authjs.callback-url: remembers where to send you after signing in. Session length.

2. Cookies we do not set

No analytics cookies, no advertising cookies, no social media pixels, and no cross-site tracking of any kind.

3. Third parties

If you choose Google sign-in or check out with Stripe, those services set their own cookies on their own pages, under their own policies.

4. Questions

Write to privacy@daystrata.com.