Cookies & Local Storage
We keep only what BeyondAllPages needs to work. We don’t use cookies or browser storage for advertising, retargeting or tracking you across other sites.
Always on
The app can’t work without these, so they don’t wait for a choice:
| Name | Kept in | What it’s for | How long |
|---|---|---|---|
| beyondallpages.auth.v1 | Local storage | Your sign-in session: sign-in tokens, and your name, email and profile photo link | Until you sign out |
| beyondallpages.dashboard.v1:… | Local storage | The habits, plans and notes you save while trying the app signed out | Until you sign in (they then move to your account), clear your browser, or use “Delete what’s saved on this device” |
| beyondallpages.models.v1, beyondallpages.starters.v1 | Local storage | A copy of the public mental-model library and ready-made stacks, so pages open fast | Replaced when the library changes; until you clear your browser |
| beyondallpages.consent.v1 | Local storage | Your cookie choice | Until you change it (we may ask again, for example when this notice changes) |
| beyondallpages.auth.verifier | Local storage | A one-time secret that finishes a sign-in with Google or an emailed link in this browser | Deleted once used; 1 hour at most |
| beyondallpages.auth.consent | Local storage | The boxes you ticked on the sign-in screen, until they are recorded on your account | Deleted once recorded; 7 days at most |
| beyondallpages.import.v1 | Local storage | A shared stack you picked on the Community page, on its way to your dashboard | Deleted once used |
| beyondallpages.tab, beyondallpages.build.intent, beyondallpages.build.query, beyondallpages.wants-subscription | Session storage | What you just picked or typed (up to 120 characters of habit text), carried to the next page | Deleted once used, or when you close the tab |
| beyondallpages.rules.checked | Session storage | That the reminder of our rules has been checked in this tab | Until you close the tab |
| beyondallpages.consent.later | Session storage | That you chose “Not now” when asked to agree to updated Terms | Until you close the tab |
Only if you choose “Accept”
| Name | Kept in | What it’s for | How long |
|---|---|---|---|
| beyondallpages.device.v1 | Local storage | A random ID that counts you once in a stack’s “used by” number while you’re signed out (when you’re signed in, your account is counted instead) | Until you choose “Reject”, which deletes it, or clear your browser |
Framer, our website host, also counts page views and clicks for every visitor with its built-in analytics. It uses no cookies, and its count uses your IP address and browser details only in hashed form, with a key that changes daily, so it doesn’t depend on your choice.
Other services
- Our database and sign-in service, Supabase, is reached straight from your browser, so it receives your IP address, as any website does.
- When you choose to pay, Razorpay’s checkout opens and may store data in your browser under Razorpay’s own privacy policy.
- Signing in with Google happens on Google’s own pages, under Google’s privacy policy. If you signed in with Google, your profile photo loads from Google’s servers.
- If a mental model includes a video, its preview image loads from YouTube’s servers when you open that model, and the player (youtube-nocookie.com) loads only when you press play. YouTube (Google) may then store data in your browser under its own privacy policy.
Changing your mind
Choosing “Reject” never blocks the app. If your browser sends a Global Privacy Control signal, we treat it as “Reject”, unless you chose “Accept” while the signal was on. You can change your choice at any time: open this page (it is linked at the bottom of every page) and use “Change cookie settings”, or use “Cookie settings” at the bottom of any page that shows it.
You can also clear storage in your browser settings. Clearing it deletes signed-out data and logs you out.