Cookie Policy

What are cookies?

Cookies are small text files that websites store on your device. They can remember your preferences, keep you signed in, or track your browsing behavior. Most websites use many cookies; Bytes uses as few as possible.

Cookies we use

Strictly necessary (required)

These cookies are essential for the Service to function. You cannot opt out without breaking login:

• __Secure-authjs.session-token (production) / authjs.session-token (development) — Auth.js session cookie. Holds the signed JWT that keeps you logged in across page loads. HTTP-only, Secure (in production), SameSite=Lax. Expires after 30 days of inactivity.
• __Host-authjs.csrf-token (production) / authjs.csrf-token (development) — CSRF protection token used by sign-in forms. HTTP-only, Secure (in production), SameSite=Lax. Cleared when you close the browser.
• __Secure-authjs.callback-url (production) / authjs.callback-url (development) — set briefly during the OAuth round-trip so we can return you to the page you started from. Cleared as soon as sign-in completes.

Preferences (functional)

We currently don't use preference cookies. Your settings (topics, reading style, etc.) are stored server-side against your account.

Analytics

We do not use analytics cookies.We don't use Google Analytics, Mixpanel, Segment, or similar third-party analytics platforms on the public site or in the app.

Advertising

We do not use advertising cookies. Bytes displays no ads and does not share data with ad networks.

How to disable cookies

You can disable or delete cookies via your browser settings. Note that disabling the strictly necessary cookies will sign you out and prevent login.

• Chrome — Settings → Privacy and security → Cookies and other site data
• Firefox — Settings → Privacy & Security → Cookies and Site Data
• Safari — Preferences → Privacy → Manage Website Data
• Edge — Settings → Cookies and site permissions → Cookies and site data

Do Not Track

We respect the Do Not Track browser signal. Since we don't do cross-site tracking anyway, this signal doesn't change our behavior — but we acknowledge and honor it.

Changes to this policy

If we ever add new categories of cookies (e.g., analytics), we'll update this policy, announce the change in-app, and obtain your consent where required by law before setting them.

Contact

Cookie questions? Get in touch.