Cookies

Last updated 28 September 2026

Almostry uses only the cookies it needs to sign you in and keep your account secure. There are no analytics, advertising or tracking cookies, and nothing from other companies is loaded on our pages.

The cookies we set

__Secure-better-auth.session_token

Keeps you signed in. Without it, every page would ask you to sign in again.

Kept for: Until you sign out, or 7 days without a visit

__Secure-better-auth.session_data

A short-lived, signed copy of your sign-in, so each page doesn’t have to check the database.

Kept for: 5 minutes

__Secure-better-auth.better-auth-passkey

Only while you sign in with, or add, a passkey: the one-time challenge your device signs.

Kept for: A few minutes

almostry_device

A random ID for this browser, so a sign-in from a device you haven’t confirmed asks for an emailed code. We store only a one-way hash of it.

Kept for: 400 days, or until you sign out everywhere

All of them are first-party (set by almostry.com), sent only over HTTPS, and can’t be read by scripts on the page.

Why there’s no cookie banner

Every cookie above is strictly necessary to provide the service you asked for: signing in and protecting your account. Cookies like these don’t need consent, so we don’t show a banner asking for it. If we ever add anything that isn’t strictly necessary, such as analytics, we’ll ask you first and it will stay off unless you say yes.

Other storage

If you turn on notifications, your browser keeps a push subscription and a small helper (a service worker) that shows the notification. It stores nothing else. You can turn notifications off in Settings or in your browser. Your theme (light or dark) is saved to your account, not in a cookie.

Blocking cookies

You can block or delete cookies in your browser settings. If you block these, you won’t be able to sign in.

Contact

Email hello@almostry.com; privacy and grievances: privacy@almostry.com.