Cookies we use
A cookie is a small value that a website stores in your browser. Stazus uses cookies for authentication, request protection, session return, and theme preference.
| Cookie | Purpose | Typical duration |
|---|---|---|
| Auth.js session cookies | Keep you signed in and protect the authenticated session. | Session lifetime or configured expiry. |
| Auth.js CSRF and callback cookies | Protect sign-in requests and return you to the requested page. | Short-lived or session storage. |
| siftr-csrf | Protect application changes from cross-site requests. | Up to one hour. |
| syftr-authenticated | Remember that a session existed so expired sessions return to sign-in safely. | Up to one year. |
| syftr-theme | Remember your light or dark theme. | Up to one year. |
Other browser storage
Stazus also uses browser storage for these interface preferences:
- the last selected team;
- the collapsed or expanded navigation state; and
- a one-time message after navigation.
These values stay in your browser. They do not contain monitoring secrets.
Third parties and tracking
The identity provider can set cookies on its own domain during sign-in. Its policy applies to those cookies. Hosting and content delivery providers receive normal web request information when they deliver Stazus.
Stazus does not currently use third-party advertising cookies, advertising pixels, or cross-site behavioral tracking. We will update this policy and add a consent control before we introduce non-required tracking.
Your controls
You can remove cookies and browser storage with your browser settings. Blocking required cookies can stop sign-in, protected changes, theme memory, or session recovery from working.
Send cookie questions to contact@jdqc.dev.