Introduction
This page is a full inventory of every cookie and browser localStorage key Botdocs sets, what each one is for, how long it persists, and whether it is strictly necessary to operate the Service. It supplements (and is referenced from) the Privacy Policy.
We don't use third-party advertising cookies, cross-site trackers, or behavioral analytics that build a profile across sites.
What we set
| Name | Kind | Purpose | Lifetime | Category |
|---|---|---|---|---|
next-auth.session-token NextAuth (first-party) | Cookie | Keeps you signed in between requests. Set after a successful sign-in. | 30 days (rolling) | Essential |
next-auth.csrf-token NextAuth (first-party) | Cookie | Protects sign-in and account-mutating forms from cross-site request forgery. | Session | Essential |
next-auth.callback-url NextAuth (first-party) | Cookie | Remembers where to return you after a completed sign-in (the page you were on). | Session | Essential |
theme next-themes (first-party) | localStorage | Remembers your light/dark/system theme choice so the page does not flicker on next load. | Until you clear browser storage | Functional |
botdocs.library.status.dismissed Botdocs (first-party) | localStorage | Remembers which Library status strip nudges you have dismissed (updates / connect-CLI / cold-start) so the same prompt does not reappear. | Until you clear browser storage | Functional |
botdocs.cookie-banner.dismissed Botdocs (first-party) | localStorage | Remembers that you dismissed the cookie banner so it does not reappear on every page load. | Until you clear browser storage | Functional |
“Essential” means the feature breaks without the entry. “Functional” means the UI is mildly degraded (a preference is forgotten) but everything still works.
Analytics and third parties
We use Vercel Analytics for privacy-friendly request analytics. It does not set tracking cookies, does not use device fingerprinting, and does not build a cross-site profile of you. It records anonymous page-view counts and aggregate performance metrics.
We do not embed Google Analytics, Facebook Pixel, advertising networks, or other third-party trackers. If that ever changes, this page and the Privacy Policy will be updated first.
Controlling cookies and storage
Every modern browser lets you block, clear, or expire cookies and localStorage for individual sites — usually under “Site settings” or “Privacy and security.” Blocking the entries marked Essential will sign you out and prevent you from signing back in. Blocking the entries marked Functional will leave preferences un-remembered (a small degradation, not a breakage).
Many browsers also support a “Do Not Track” signal. Botdocs doesn't collect cross-site tracking data in the first place, so this signal doesn't change our behavior — we treat all users the same way regardless.
Changes to this page
We'll update this page whenever the inventory above changes. Material additions — a new third-party analytics vendor, a new tracking cookie — will also be called out in the Botdocs changelog and in a Privacy Policy update.