Cookies

Sign-in

After you log in, Better Auth sets a session cookie so the app can recognize that browser. The cookie name differs between plain HTTP in development and HTTPS in production. It is an essential cookie for a signed-in product. Signing out or resetting a password clears the sessions that cookie represents.

A short cookie cache, about five minutes, reduces how often the session is looked up. A revoked session can linger on another tab for that long.

What is not a cookie here

Light or dark appearance is saved on the account in the database. The public marketing pages do not set a preference cookie. The contact form does not store a tracking cookie.

No analytics or advertising cookie is set by the app. If that changes, this page will say so before the cookie is used, and a banner will be added only if a non-essential cookie is actually set.

How to refuse the session cookie

If the browser blocks the session cookie, login will not stay signed in. That is expected. The public pages, including contact, do not need that cookie.