Last updated 5 November 2026

Cookies

strongot uses only what it needs to work. No advertising cookies, no analytics, no tracking across sites, so there is nothing to opt out of.

The cookie we set

better-auth.session_token (or __Secure-better-auth.session_token): keeps you signed in. It lasts 30 days and goes when you sign out. Without it you couldn’t stay signed in, so it’s strictly necessary and needs no consent.

What Cloudflare may set

Our traffic passes through Cloudflare, which can set a short-lived security cookie such as __cf_bmto tell people from bots. It isn’t used to follow you.

What your browser remembers

When you dismiss the cookie notice, your browser stores that in its local storage as strongot_cookie_notice_v1, so it doesn’t ask again. That never leaves your browser.

In the app

The iPhone and Android app doesn’t use cookies. It keeps your sign-in in your phone’s secure storage, and remembers your theme and which side you last had open on the device.

Removing them

Your browser settings can clear or block cookies at any time. If you block the session cookie you won’t be able to sign in.