Bluecoderhub — Cookies
Cookie Policy
This site uses a small number of cookies. All of them are essential for the functionality below; none are used for advertising or cross-site tracking.
01What we set
- __Host-auth_token (auth_token in development) — an httpOnly, SameSite=Strict, Secure cookie that authenticates admin sessions. Expires after 2 hours, and is revoked on the server when you log out.
- __Host-mfa_challenge (mfa_challenge in development) — a short-lived httpOnly cookie set only between entering a correct admin password and entering the second-factor code. It expires after 5 minutes and is cleared as soon as the sign-in completes.
- Both cookies are set only when a member of the Bluecoderhub team signs in to the admin area. Reading the site sets no cookie at all.
- Your browser keeps one item in local storage, named theme, and only if you choose Light or Dark with the theme button. It holds that one word, never leaves your browser, and is removed when you choose Auto. Nothing is kept in session storage.
- No third-party analytics or advertising cookies are set by this site as of the current build.
02What we do not set
- No Google Analytics, Meta Pixel, or comparable third-party tracker.
- No cross-site tracking cookies.
- No cookies for uses other than authentication.
03Your controls
- Block or delete cookies through your browser settings. Blocking the auth_token cookie will simply prevent admin login on this device.
- There is no cookie banner because there is nothing to consent to: consent is required for non-essential cookies, and this site sets none. If we ever add one, we will ask for explicit consent through a banner before setting it.
This notice is written in plain English to describe how Bluecoderhub currently handles data on this site. It is not a substitute for the reviewed legal document that will replace it before commercial launch.
Last updated: 2026-10-30