Hookova1. What a cookie is
A cookie is a small file a website stores in your browser so it can recognise your browser on the next request. Related technologies — local storage, for instance — do the same job for data that never needs to reach our server.
2. The cookies we set
All of these are set by hookova.com and are required for the service to function. There is no way to use a signed-in account without them.
- authjs.session-token (or __Secure-authjs.session-token over HTTPS) — holds your signed-in session so you don't have to log in on every page. Expires after 30 days, or when you sign out.
- authjs.csrf-token (or __Host-authjs.csrf-token) — protects sign-in and sign-out requests against cross-site request forgery. Session cookie; cleared when you close the browser.
- authjs.callback-url (or __Secure-authjs.callback-url) — remembers where to send you back to after signing in. Session cookie.
3. Local storage
Two preferences live in your browser's local storage rather than in a cookie, and are never sent to us:
- sh-theme — whether you chose light or dark mode.
- hv-notices — your recent in-app notifications, so the bell menu survives a refresh.
Clearing your browser's site data removes both.
4. Third-party cookies
We set none. If you pay for a plan, Stripe's checkout and billing portal are hosted on Stripe's own domains and set their own cookies there, governed by Stripe's cookie policy. Signing in with Google sends you to Google's domain, which does the same.
5. Managing cookies
Every major browser lets you view and delete cookies, and block them by site. Blocking ours will stop you from signing in, but the public pages — the landing page, guides, and blog — will keep working.
6. Changes and contact
If we ever add a cookie that isn't strictly necessary, we'll ask for your consent first and update this page. Questions: petazfeng@gmail.com.