Cookies & browser storage

Better Auth sets a first-party session cookie when you sign in. It identifies your session so the server can authorize access to your account. The usual name is better-auth.session_token, prefixed with __Secure- on HTTPS.

It is HTTP-only, uses SameSite=Lax, and is secure on public HTTPS deployments. The configured lifetime is seven days and may renew during use. Signing out ends the current session. A non-persistent sign-in, if used, may also use a better-auth.dont_remember cookie for that browser session.

These cookies support requested account functions and security; they are not advertising cookies. Blocking them prevents signed-in features from working, but public educational pages remain available.

When you choose to save the older quiz result, local storage under ahw-account holds the email you entered, four browsing answers, and save/update dates. This is a browser bookmark, not an authenticated account or server backup.

The bookmark has no automatic expiry. It stays until you replace it, clear site storage, or the browser removes it. Other people using the same browser profile may be able to see it. Account sign-out or deletion does not clear this separate bookmark.

Discovery preferences, current screening answers, and library search/return state live in browser memory. They are not stored in cookies, local storage, or session storage by these features. A full reload resets that memory. Signing in, signing out, or deleting an account clears temporary discovery state and sends a clear signal to other open tabs; that signal does not contain your answers.

Public area, side, and collection choices can appear in a URL or browser history. Older quiz share links contain the four quiz answers. Browser back/forward history is separate from account storage.

Analytics in this build: disabled.

Vercel Web Analytics is disabled by default. If the operator enables it, this integration accepts only public page-view events, strips queries and fragments, and excludes account, routine, progress, quiz, body, movement-library, and studio routes. Custom events are rejected.

The provider describes Web Analytics as cookie-free; it can still process technical request and device information. Cookie-free does not mean no data processing. See Vercel’s analytics privacy explanation.

The application has no advertising pixels, cross-site behavioral targeting, or session-replay integration. This notice is not a consent banner. Any optional technology that requires consent must have the appropriate choice in place before it is enabled.

Use your browser’s site-data settings to inspect, block, or clear cookies and local storage. Clearing them can sign you out and remove the older quiz bookmark. Ordinary browser caching can retain downloaded site files; clearing the cache removes those local copies.

These actions do not erase server-side routines or completed sessions. Where accounts are available, use account controls to export or delete those records. Unsaved form entries are not stored for offline recovery.

When you follow an external link, that site may use its own storage under its own notice. For company contact and broader data practices, read our Privacy notice.