Cookie Policy
Last updated: 2026-05-02
We use a minimal set of cookies and localStorage entries — only what’s strictly necessary to run the app, plus an optional analytics cookie you can decline.
Strictly necessary
| Name | Type | Purpose | Lifetime |
|---|---|---|---|
| next-auth.session-token | HTTP-only cookie | Authentication session | 30 days |
| allroutes-active-org-id | localStorage | Current workspace | Until cleared |
| allroutes-theme | localStorage | Light / dark theme preference | Until cleared |
| allroutes-cookie-consent | localStorage | Your cookie banner choice | Until cleared |
Optional (analytics)
Cloudflare Web Analytics records aggregated, anonymized page-view data — no IP, no cross-site tracking. You can decline this when the cookie banner appears, and toggle it anytime from Settings → Privacy.
What we don't use
We don’t use third-party advertising cookies, marketing pixels, or session-replay tools.