Cookie policy
Last updated 12 October 2026
This policy explains the cookies and similar technologies Yorki uses on yorki.dev, what each one is for, how long it lasts and how you can control it. The privacy policy explains how we handle the personal data involved.
1. Our approach
We keep this short on purpose:
- No advertising cookies. We do not use advertising, retargeting or social media tracking cookies, and we do not share data with advertising networks.
- Nothing optional before you sign up. Anonymous visitors get no analytics cookies. Visits are counted without storing anything in the browser.
- No cookie banner. Because nothing optional is stored before you give your consent at sign-up, we do not show a cookie banner.
2. What cookies and browser storage are
A cookie is a small text file that a website stores in your browser and reads back on later visits. Browser storage, called local storage and session storage, works in a similar way but is only read by the page itself. Session storage is cleared when you close the tab. Local storage stays until it is removed. In this policy, "cookies" covers all of them.
First-party cookies are set by yorki.dev. Third-party cookies are set by another company's service that a page uses.
3. Strictly necessary
These make Yorki work and keep it secure. They cannot be turned off in Yorki.
| Name | Provider | Purpose | Duration |
|---|---|---|---|
__Secure-better-auth.session_token | Yorki | Keeps you signed in. Set only when you sign in. | 7 days, renewed while you use Yorki; removed when you sign out |
__cf_bm, cf_clearance | Cloudflare | Set only when Cloudflare needs to check whether traffic comes from a person, to protect Yorki from attacks | 30 minutes for __cf_bm; the period the check allows for cf_clearance |
| Turnstile | Cloudflare | The bot check on the sign-up form, which runs in its own frame | For the check only |
sentryReplaySession (session storage) | Yorki, through Sentry | Lets an error report include the moments before the error, so we can fix it | Until you close the tab |
4. Preferences and functional storage
These remember what you did or chose, so that Yorki works the way you expect. They stay in your browser and are only sent to us as part of what you asked for.
| Name | Purpose | Duration |
|---|---|---|
yorki:landing-prompt (local storage) | Keeps the prompt you typed on the front page while you sign up, so your first build starts from it | Up to 24 hours; removed once it is used |
yorki:via (local storage) | When you arrive through a shared link that carries a code, keeps that code so that, if you sign up, we know which post or channel brought you | 30 days |
yorki:sidebar-collapsed, yorki:chat-width (local storage) | Remember the layout of the builder | Until you clear them |
yorki:owner-data-2fa-nudge-dismissed (local storage) | Remembers that you closed the suggestion to turn on two-factor authentication shown above your app's live data | Until you clear it |
yorki:mode:v2:<project>, yorki:pending-prompt:<project> (session storage) | Remember the composer mode and hand your prompt to a new project | Until you close the tab |
5. Analytics and session recordings
These are used only after you create an account or sign in. Signing up is the moment you give your consent, as the sign-up form says.
| Name | Provider | Purpose | Duration |
|---|---|---|---|
ph_<key>_posthog, __ph_opt_in_out_<key> (local storage) | PostHog (EU cloud) | Links product analytics and, during the alpha, session recordings to your account, and remembers your choice | Until you sign out; then only the record of your choice stays |
yorki:approved-seen:<account> (local storage) | Yorki | Counts your first visit after your access was approved, once per browser | Until you clear it |
Before you sign up, PostHog counts your visit without storing anything in your browser.
6. Apps built with Yorki
Apps published on yorki.app are made by their owners, not by us. An app may store its own data in your browser, for example to keep you signed in to it. Its owner is responsible for that and for telling you about it. We do not add analytics or advertising cookies to published apps.
7. Managing cookies
- Sign out to remove the session cookie and what PostHog stored.
- Withdraw your consent to analytics and session recordings at any time by writing to [email protected].
- Your browser can show, block and delete cookies and site data. See the help pages of Chrome, Safari, Firefox and Edge. If you block strictly necessary cookies, you cannot sign in.
Settings apply to the browser and device you change them on.
8. Changes and contact
We update this policy when we add or remove a cookie. The date at the top shows the latest version. Questions: [email protected].