Cookie Policy
Last updated: March 16, 2026
1. What Are Cookies?
Cookies are small text files stored on your device when you visit a website. They help websites remember your preferences, login status, and browsing behavior. sh0 uses cookies to improve your experience and protect your account.
2. Types of Cookies We Use
2.1 Essential Cookies (Always Active)
These cookies are necessary for sh0 to function:
| Cookie Name | Purpose | Expiration |
|---|---|---|
| sh0-auth | Authentication token | 24 hours |
| sh0-refresh | Refresh token | 30 days |
| sh0-session | Session ID | 30 minutes (idle) |
| csrf-token | CSRF protection | Session |
| preference-theme | Dark/light mode preference | 1 year |
2.2 Performance Cookies (Optional)
These cookies help us understand how you use sh0:
- Analytics ID: Tracks page views and interactions (Plausible Analytics)
- Feature Flags: Stores A/B test assignment
- Performance Metrics: Measures page load speed
2.3 Preference Cookies (Optional)
These store your preferences:
- Language preference
- UI theme (dark/light)
- Sidebar state (collapsed/expanded)
- Dashboard layout preferences
3. Third-Party Cookies
Some third-party services may set cookies:
- Stripe: Payment processing cookies
- Cloudflare: CDN and security cookies
4. Cookie Control
4.1 Browser Settings
You can control cookies in your browser:
- Accept all cookies
- Block all cookies (may break functionality)
- Allow only essential cookies
- Clear cookies on exit
4.2 Cookie Preferences
You can manage your cookie choices:
- Essential (always enabled)
- Analytics (optional)
- Preferences (optional)
5. Cookie-Related Technologies
We may also use:
- Local Storage: Stores larger data locally (theme, sidebar state, dashboard settings)
- Session Storage: Clears when you close the browser
6. Your Rights (GDPR/CCPA)
6.1 EU Users (GDPR)
- Right to refuse non-essential cookies
- Right to withdraw consent anytime
- Cookie consent must be explicit (not pre-checked)
6.2 California Users (CCPA)
- Right to know what cookies track you
- Right to delete cookies (via browser)
- Right to opt-out of tracking cookies
7. Cookie Data Processing
- Data Retention: Deleted per cookie expiration
- No Sale: We do not sell cookie data
- Security: Secure, encrypted transmission
- HTTPS Only: Cookies are never sent over insecure connections
8. Changes to Cookie Policy
We may update this policy. Changes are effective immediately upon posting. Your continued use means acceptance of updates.
9. Questions About Cookies?
- Email: [email protected]
- General: [email protected]