Cookie Policy

Last updated: 11 August 2026

This page lists every cookie and browser-storage key the Service sets, what each one is for, and how long it lasts.

Draft — not yet in force. Still missing: Florida registration (Sunbiz document) number, registered postal address. A privacy policy that does not give the controller's address fails GDPR Art. 13(1)(a), and commercial email without a physical postal address breaches CAN-SPAM. Complete LEGAL_ENTITY in src/lib/legal.ts and have these documents reviewed by a lawyer before relying on them.

1. What cookies are

Cookies are small text files a site stores in your browser. We also use local storage, which works similarly but is not sent with every request. Both are covered by this policy.

2. Cookies we set

We do not use advertising cookies, and we do not sell data to advertisers. The table below is the complete list.

Name	Set by	Purpose	Retained	Type
`better-auth.session_token`	Social Scheduler Platform	Keeps you signed in. Without it you cannot use an account.	Up to 30 days	Essential
`__cf_bm / cf_clearance`	Cloudflare	Set by the Turnstile bot-protection challenge on the sign-in and sign-up forms.	30 minutes to 1 year	Essential
`_ga / _ga_*`	Google Analytics	Distinguishes visitors to produce aggregate usage statistics.	Up to 2 years	Analytics
`t21-welcome-seen`	Social Scheduler Platform	Browser local storage. Remembers that you dismissed the welcome dialog.	Until you clear site data	Functional
`t21-captured-email`	Social Scheduler Platform	Browser local storage. Pre-fills your email in checkout and signup flows.	Until you clear site data	Functional

3. Categories

Essential — required for the Service to work at all. These keep you signed in and protect the sign-in form from automated abuse. They cannot be switched off without breaking the Service.
Analytics — aggregate statistics about how public pages are used, so we know which pages are worth improving.
Functional — remember small preferences, such as whether you have already dismissed the welcome dialog.

4. Bot protection

Our sign-in and sign-up forms use Cloudflare Turnstile. It sets a cookie and inspects browser signals to tell a person from a script. It is a security control, not a tracker: it is only active on those two forms, and we do not use it to build a profile of you. Blocking it will prevent you from signing in.

5. How to control cookies

Browser settings — every major browser lets you block or delete cookies. Blocking essential cookies will sign you out and prevent you from signing back in.
Analytics opt-out — Google provides a browser add-on that disables Google Analytics across all sites.
Local storage — clearing site data in your browser removes the functional keys listed above.

6. Changes and contact

If we add or remove a cookie, this page is updated along with the date at the top. For questions, email privacy@socialschedulerplatform.com. How we handle personal data more generally is described in our Privacy Policy.

Related policies

Questions about these terms? legal@socialschedulerplatform.com