Cookie Policy
Cookies, browser storage and website measurement on NorthYak.
- Effective
- Last updated
Cookies are small values stored by your browser. NorthYak uses authentication cookies to keep an account signed in and protect sign-in redirects. They are set when the relevant account features are available and used; browsing the public inspector does not require an account cookie.
| Name | Purpose and category | Duration |
|---|---|---|
__Secure-better-auth.session_token | Identifies your signed-in session. Necessary for authentication. | 7 days, renewed during use. |
__Secure-better-auth.session_data | A signed cache of session and user information. Necessary for authentication; may be split across numbered cookies. | 5 minutes. |
__Secure-better-auth.state | Protects the Google or GitHub sign-in redirect. Necessary for authentication security. | 5 minutes; removed after the callback. |
These cookies use Secure, HttpOnly and SameSite protections in production. The session cache is signed, not encrypted. Clearing or blocking authentication cookies signs you out or prevents account features from working.
Cloudflare security
Cloudflare protects the site and Turnstile checks requests for abuse. Its embedded challenge processes browser and device signals and may use security-related browser storage. Our Turnstile widget does not enable pre-clearance, so we do not attribute a clearance cookie to it. See Cloudflare’s Turnstile privacy notice.
Other browser data and measurement
NorthYak does not store an account or anonymous access token in localStorage or sessionStorage. The public inspector’s temporary access token stays in memory; search coordinates can appear in the page URL and browser history. Ordinary browser caching stores site files and app images. These are separate from account cookies.
Cloudflare Web Analytics measures site traffic and performance outside our configured EU visitor exclusion. Cloudflare describes it as using no cookies or localStorage. Measurement is explained in the Privacy Policy; the absence of a cookie is not the absence of data processing.
We do not currently set advertising or marketing cookies. If we introduce optional analytics or marketing storage, we will update this policy and provide the consent controls required by applicable law before enabling it.