Cookies.
Every cookie this site sets. None of them track you, so there's no cookie banner.
Last updated 24 October 2026
What we set
| Name | What it's for | How long |
|---|---|---|
| better-auth.session_token | Keeps you signed in. | 60 days, renewed while you use the app |
| better-auth.session_data | A short-lived copy of your sign-in so pages load without checking the database every time. | 5 minutes |
| stayer_invite | Lets someone with an invite link create an account before the app opens to everyone. | 30 days |
| stayer_race | Remembers the race you picked on a race page, so the briefing starts with it chosen. | 30 days |
| stayer_ref | Remembers the friend's invite you followed, so you both get a month of Pro when you sign up. | 30 days |
| theme | Remembers whether you chose light or dark mode. | 1 year |
| strava_oauth | Checks that a Strava connection you started is the one that comes back. | 10 minutes |
In production, the two sign-in cookies have "__Secure-" in front of their names.
Why there's no banner
The law asks for consent before a site stores anything that isn't needed for the service you asked for. These cookies either keep you signed in or remember a choice you made on this site, so they don't need it. There are no analytics, advertising or social media cookies.
Page views and usage counts
We count page views with Vercel Analytics. It sets no cookies and stores nothing on your device. Visits are counted with a code that changes every day and can't be traced back to you or followed to other sites.
We count a few steps the same way, like finishing sign-up, saving a check-in or opening checkout. A count says which step it was and which button, never who did it. It never includes your email, your name, anything you typed or anything about your health.
Links in our emails say which email they came from, so we can see which emails are useful.
Turning them off
You can block or delete cookies in your browser settings. If you block the sign-in cookies, you won't be able to sign in.