Cookie policy
Version 2.0, effective October 1, 2026
Cookies and local storage are small pieces of data that a website keeps in your browser. This policy lists the ones Desidera uses.
Your choice
We only use analytics cookies if you accept them in the banner. "Accept analytics" and "Reject" count the same, and rejecting changes nothing about how the site works for you. You can change or withdraw your choice at any time:
When you withdraw consent, we stop sending analytics right away and delete the analytics cookies from your browser.
All other entries below are strictly necessary to give you the service you ask for, such as keeping you signed in, so the law allows them without consent.
What we store
| Name | Purpose | Type | How long |
|---|---|---|---|
sb-…-auth-token (cookie) | Keeps you signed in securely | Necessary | Until you sign out, max 400 days |
sb-…-auth-token-code-verifier (cookie) | Protects the sign-in link while you sign in | Necessary | Until sign-in finishes |
auth_intent (cookie) | Remembers where to take you after signing in | Necessary | 1 hour |
signed_in (cookie) | Shows the right menu when you're signed in; holds no identity | Necessary | 30 days |
beta_access (cookie) | During the private beta, shows "Sign in" in a browser that opened an invite link or has signed in before; holds no identity | Necessary | 1 year |
daily_card (cookie) | Remembers today's card so you get one card per day | Necessary | 48 hours |
birth_date_prefill (cookie) | Only if you choose to save your tarot birth cards: keeps your date of birth so we can fill it in when you sign up | Necessary | 30 days |
cookie-consent (local storage) | Remembers your cookie choice | Necessary | Until you clear it |
NEXT_LOCALE (cookie) | Remembers your language | Necessary | 1 year |
theme (local storage) | Remembers light or dark mode | Necessary | Until you clear it |
ph_…_posthog (cookie and local storage) | PostHog analytics: counts visits and actions with a random ID, not your name or email | Analytics, only with consent | 1 year |
Cloudflare Turnstile, which blocks bots on our forms, checks technical signals from your browser when you submit a form, to tell people from bots. It doesn't set cookies and isn't used for tracking or advertising.
Error tracking
We use Sentry to find and fix errors. It sets no cookies, and personal data such as email and IP addresses is removed from error reports, so it runs without asking for consent.
More
Read our privacy policy or write to us at hello@desidera.app.