Last updated: 11 September 2026
This Cookie Policy explains how Basestack uses cookies and similar technologies on the Basestack marketing site and product apps at https://www.basestack.co. It forms part of the Privacy Policy.
Essential cookies are required to keep you signed in, protect sign-in flows, remember security state, and operate the product. They cannot be disabled through Basestack because the product will not work without them.
| Name | Purpose | Duration |
|---|---|---|
basestack-{product}.session_token | Authenticated session identifier set by BetterAuth. HTTP-only and Secure in production. | Session lifetime, by default 7 days |
basestack-{product}.session_data | Short-lived session cache used to reduce database lookups. HTTP-only and Secure in production. | Up to 2 hours |
basestack-{product}.state, basestack-{product}.pkce | CSRF protection and PKCE state during OAuth sign-in. | A few minutes |
The {product} segment in each cookie name is the product prefix. These cookies are currently set by:
basestack-flagsbasestack-formsBasestack may remember interface preferences such as light or dark mode. Where this is stored in browser local storage rather than a cookie, it is still described here for transparency. Preference storage is not used for advertising.
On the marketing site, Basestack uses Umami for privacy-friendly analytics. We use analytics to understand aggregate page views, referrers, country, browser, and device type. We do not use advertising cookies and do not use analytics cookies in the product apps.
GitHub and Google may set cookies during OAuth sign-in if you choose those providers. Polar, our merchant of record, may set cookies during checkout or billing portal use on Polar's own domain. Those cookies are governed by the third party's own policies.
The list of providers Basestack uses is maintained on the Sub-processors page.
You can block or delete cookies through your browser settings. Blocking essential cookies will sign you out and prevent parts of the product from working. Where consent is required for non-essential cookies or similar technologies, Basestack will ask before using them.
We may update this Cookie Policy as the Service, providers, or laws change.