Cookie Policy
Effective: 2026-05-17 · Last updated: 2026-05-17
Repulabs uses a small number of cookies to keep you signed in, remember your preferences, and measure aggregate usage. We don’t use cookies for third-party advertising and we never sell personal data.
1. What is a cookie?
A cookie is a small text file stored on your device by your browser. It can hold values like a session identifier or a preference flag. Some cookies expire when you close the browser; others persist for a set duration.
2. Cookies we set
| Name | Purpose | Duration | Type |
|---|---|---|---|
authjs.session-token | Keeps you signed in to your tenant workspace. Set by Auth.js after a successful magic-link or SSO login. | 30 days, sliding | Essential |
admin_session | Admin session for staff members at admin.repulabs.com. Separate from tenant sessions. SameSite=Strict. | 12 hours, fixed | Essential |
oauth_state_* | CSRF protection during the OAuth handshake to connect Google, Meta, or other providers. | 10 minutes | Essential |
rl-theme | Stores your preferred theme (light / dark / system). Set only if you change the default. | 1 year | Preference |
3. Analytics
We use a privacy-preserving analytics solution (Plausible) that does not set cookies and does not track individual users. Aggregate pageviews and conversion events are recorded from the server side using an anonymized hash of IP + user-agent that rotates daily.
4. Third-party cookies
Some embedded checkout flows (Stripe) and OAuth providers (Google, Meta) set their own cookies during your interaction with them. Those are subject to their respective cookie policies. We do not have access to or control over those cookies.
5. Your choices
- Browser controls — every major browser lets you block or delete cookies. Blocking essential cookies will sign you out and disable OAuth connections.
- Do Not Track — we respect the DNT header. Sites with DNT enabled receive no preference cookies and no analytics pings.
- Delete your account — see our Privacy Policy for the full data-deletion pipeline.
6. Changes
If we add new cookie types we’ll update this page and notify signed-in users via a dashboard banner at least 14 days before the change takes effect.