Legal
Cookie Policy
Last updated: July 3, 2026
1. What we set
TripOS uses a small number of first-party cookies:
| Cookie | Purpose | Lifetime |
|---|---|---|
| authjs.session-token | Keeps you signed in (essential) | Session / 30 days |
| authjs.csrf-token | Protects sign-in against CSRF (essential) | Session |
| tripos-workspace | Remembers your selected workspace (functional; validated server-side on every request) | 1 year |
2. Analytics
We use PostHog and Vercel Analytics to understand product usage in aggregate. Where these tools use browser storage, it is scoped to measuring the product — we do not run advertising trackers and do not sell data. Error monitoring (Sentry) may attach request identifiers to error reports.
3. Your choices
Essential cookies are required for sign-in and security. You can clear cookies in your browser at any time — you’ll be signed out and workspace selection resets to personal. Questions: privacy@tripos.dev. Related: Privacy Policy.