Cookies & local storage

1. Necessary storage

Better Auth uses session and security cookies to keep you signed in and protect authentication. The normal session lifetime is seven days and may refresh with active use. A short-lived verification or recovery flow has its own expiry. Cookie names generally begin with better-auth or __Secure-better-auth. These are necessary for the service you request.

We also remember the theme and sidebar preference, keep in-progress chat drafts in session storage and retain recoverable canvas/document drafts on your device where the editor needs them. Draft storage is for your work, not advertising. Device storage can remain until you clear it or the relevant feature removes it; clearing it may discard unsaved work.

The orch.analytics-consent.v1 local-storage entry records your analytics choice and date for 180 days. It stores no account ID and is used to honour your preference, including a refusal.

2. Optional Google Analytics

When configured and allowed, Google Analytics measures visits to the landing page, public articles and legal pages. It receives a public page path and technical information such as browser and device details. Google can process your IP address in handling the request. We do not send workspace content, account identity, email addresses, URL query strings or fragments in our page-view events.

Analytics cookies such as _ga and _ga_<measurement-id> distinguish visits. We configure a 180-day cookie lifetime. Advertising storage, Google signals and advertising personalisation are disabled by our tag configuration. There are no Google Analytics requests before you opt in; we use basic consent mode rather than sending pre-consent pings. Google’s own privacy and transfer terms also apply to its processing.

3. Change your choice

Use Cookie preferences at the bottom of any public page to allow or reject analytics. Both choices are available without creating an account. Rejecting stops future collection through our tag and clears accessible analytics cookies; it does not automatically erase information already received by Google. Contact us if you want to exercise a data-protection right.

You can also clear site storage or block cookies in your browser. Blocking necessary storage may affect sign-in or draft recovery. Your choice applies to this browser; make the choice separately on other devices. If browser storage is unavailable, we cannot remember the choice after the current visit.

4. Other services

Payments take place on Stripe’s checkout and billing portal, where Stripe’s own cookie notices apply. Opening a source video or an external website takes you to a service with its own privacy practices. We do not treat acceptance of these terms as consent to optional analytics.