openshield uses only what the service needs to work, or what you ask for by using a control. There is no advertising, no analytics and no tracking. For that reason there is no cookie banner: cookies that are strictly necessary need no consent under Belgian and European rules.
A visitor who only reads the public pages receives no cookie at all.
What is stored
| Name | What it is for | When it is set | How long |
|---|---|---|---|
better-auth.session_token (on the production site, with the prefix __Secure-) |
Keeps you signed in. Not readable by scripts. | When you sign in | Up to 7 days |
better-auth.two_factor (same prefix rule) |
Remembers that your password was accepted while you enter your two-factor code | During sign-in, for accounts with two-factor authentication | A few minutes |
better-auth.state (same prefix rule) |
Protects a sign-in with GitHub or Google against forgery | While you sign in with GitHub or Google | A few minutes |
om-theme |
Remembers the light or dark theme you chose in the dashboard | When you use the theme control | 1 year |
admin-sidebar-mode |
Remembers how you set the dashboard's side menu | When you change that setting | 1 year |
The three sign-in cookies are strictly necessary. The two preference cookies store a choice you made, hold no identifier and are never sent to anyone else: we treat them as necessary to provide the setting you asked for.
Browser storage of the bot check
The sign-up, sign-in, password reset and magic link forms, and the Try it console, use Cloudflare Turnstile to tell a person from a bot. When the check runs, Turnstile stores one entry in your browser's local storage, under the Cloudflare domain challenges.cloudflare.com (cf.turnstile.u). Cloudflare states that the signals Turnstile uses are strictly necessary to detect and block bots, and does not use them to identify or profile people. See Cloudflare's Turnstile privacy addendum.
Controlling them
You can delete these cookies and this storage in your browser's settings at any time. Without the session cookie you are signed out. Without the others, the dashboard falls back to its defaults.
If we ever add a cookie that is not strictly necessary, we will ask for your consent first and list it here.