Cookie Policy
Last Updated: October 11, 2026 • Strict Minimalist Policy (Zero Advertising Cookies)
1. Our Commitment: Zero Advertising or Cross-Site Trackers
AuthSetu respects developer and end-user privacy. We do not use third-party advertising trackers, retargeting pixels, social media beacons, or data broker cookies anywhere across our platform. The cookies we set are strictly necessary to provide authentication, protect against session hijacking, and maintain session state across our monorepo web applications.
2. Detailed Inventory of Cookies
| Cookie Name | Category | Security Flags | Expiration | Purpose |
|---|---|---|---|---|
| authsetu_session | Essential / Auth | Secure, SameSite=Lax, Domain=.authsetu.com | 30 days | Maintains authenticated developer state across the marketing site, docs, and console dashboard. |
| __Host-authsetu_session | Essential / Security | HttpOnly, Secure, SameSite=Lax, HostOnly | 30 days | Cryptographically locked host-prefixed session token for enhanced defense against cross-subdomain attacks. |
| authsetu_csrf | Essential / Security | Secure, SameSite=Strict | Session | Protects administrative form submissions and sensitive settings changes against Cross-Site Request Forgery (CSRF). |
3. Managing & Disabling Cookies
Because all cookies set by AuthSetu are strictly essential to authenticate users and prevent fraud, blocking or deleting these cookies through your browser settings will prevent you from signing in or accessing the Developer Console.
4. Contact & Inquiries
If you have any questions about our use of cookies or technical identifiers, contact our engineering team at privacy@authsetu.com.