What is a cookie
A cookie is a small piece of data a website stores on your device so it can remember you between page loads — most commonly to keep you signed in or to count an anonymous visit. We use cookies only for the purposes listed below.
Cookies we set
| Cookie | Purpose | Scope | Retention |
|---|---|---|---|
__Secure-next-auth.session-tokennext-auth.csrf-token | Necessary. Keeps you signed in to the dashboard and protects the sign-in form from cross-site forgery. | app.mendworthy.com | Until sign-out or 30 days |
ph_<project_key>_posthog | Analytics. Stores an anonymous identifier and session window so we can measure aggregate site usage and conversion. Set on the apex so the same identifier reads on both the marketing site and the dashboard. | .mendworthy.com | 12 months |
__cf_bm | Necessary. Cloudflare bot management — blocks automated abuse without affecting legitimate browsing. | Per Cloudflare-protected host | 30 minutes |
| Cloudflare Web Analytics beacon | Analytics. Sends an anonymous page-view ping to Cloudflare. No cookie is set; listed here so the inventory is complete. | No cookie | N/A |
How to control cookies
Modern browsers let you block or delete cookies from the browser settings. Helpful links:
Blocking the necessary cookies (Auth.js, Cloudflare bot management) will prevent you from signing in or may trigger a security challenge. Blocking the analytics cookie has no effect on functionality — pages will continue to work normally; we just won't see your visit in our usage metrics.
If you'd like us to disable PostHog analytics for your account specifically, email privacy@mendworthy.comand we'll opt your distinct identifier out at the source.
What we don't use cookies for
- Advertising or retargeting.
- Selling, sharing, or transferring data to data brokers or advertising networks.
- Tracking you across third-party sites.
Changes to this notice
If we add, remove, or change a cookie, we'll update the inventory above and the "Last updated" date at the top. Material changes will be reflected in our Privacy Policy as well.
Contact
Questions about cookies or our privacy practices can be directed to privacy@mendworthy.com.