Skip to content
Legal

Cookies and browser storage

Every cookie and storage key Deftro uses, what it is for, how long it lasts, and how to switch analytics off.

Version 2026-11-10 · Effective

1.In short

Deftro sets only the cookies it needs to sign you in and to remember a few choices, and keeps a few more choices in your browser's local storage. There are no advertising cookies and no third-party trackers, so there is no banner. Analytics is cookieless and can be switched off below.

2.Cookies

NameWhat it is forHow long
better-auth.session_tokenKeeps you signed in; signed and HTTP-only.7 days, renewed daily while you use the site
better-auth.session_dataA signed copy of your session, so not every page has to ask the database.1 minute
better-auth.stateTies a Google or GitHub sign-in to the browser that started it.5 minutes, during sign-in
bv_refRemembers whose invite link you followed until you finish signing up.1 hour, sign-in only
bv_restrictedLets the account status page show a suspended or banned person their state.15 minutes
bv_orgThe organisation you last switched to.1 year
sidebar_stateWhether the sidebar is open or closed.1 year

On the live site the sign-in cookies carry a __Secure- prefix. They are strictly necessary: without them you cannot sign in.

3.Browser storage

These stay in your browser and are never sent to us.

NameWhat it is forHow long
bv_themeLight or dark theme.Until you clear it
bv_dismissed_announcementThe site announcement you closed.Until you clear it
bv_dismissed_maintenanceThe maintenance notice you closed.Until you clear it
bv_saw_maintenanceThat this tab saw a maintenance window, so it can tell you when it ends.Until you close the tab
bv_diff_layoutSide-by-side or unified version diffs.Until you clear it
bv:search:v1Your recent searches, on this device only.Until you clear it
bv:tour-seen:v1That you have seen the walkthrough.Until you clear it
bv:sponsor-nudge-seen:v1That you have seen the sponsoring hint.Until you clear it
bv:assistant-hint-seen:v1That you have seen the help assistant hint.Until you clear it
bv_analytics_offThat you switched analytics off, below.Until you switch it back on

A service worker also keeps the offline page and the site's static files in your browser's cache, so a page can load without a connection. Nothing about your account is kept there.

4.Analytics

Vercel Web Analytics counts page views and Vercel Speed Insights measures how fast pages load. Neither sets a cookie or follows you to other sites, and addresses are stripped of tokens before they are sent. The counts help us see which pages work, so the switch starts on; turn it off and this browser sends nothing. A browser that sends Global Privacy Control is treated as switched off.

5.Other sites' content

Profile pictures load from Google, GitHub or Cloudinary, and image uploads go straight to Cloudinary, so those companies see your IP address when your browser fetches from them. They set no cookies for us. See sub-processors.

6.Contact

Questions about cookies: sales@baton-vault.vercel.app. The privacy policy covers everything else we keep.