Cookie Policy

Last updated: June 13, 2026

This Cookie Policy explains how SquadBear uses cookies and similar local-storage technologies on our website and web app. It supplements our Privacy Policy.

1. Our approach

By default SquadBear uses only strictly-necessary cookies - those required to sign you in, keep you signed in, and protect the Service. These cannot be switched off without breaking core functionality and need no consent under EU/UK ePrivacy rules. On our marketing website (squadbear.com) we additionally use optional analytics cookies (Google Analytics) - but only with your consent, asked via the cookie banner. We do not use advertising cookies or cross-site trackers, and we do not sell or share cookie data. You can change or withdraw your analytics choice at any time via the “Cookie settings” link in the website footer. Separately, our marketing website keeps a small attribution stash in your browser’s session storage (not a cookie) - the campaign parameters present on your first page view, the landing page, and the referring site’s hostname. This identifies no one, is never shared with third parties, and is discarded when your browser session ends.

2. What cookies are

Cookies are small text files a site stores in your browser. They let a site remember things between requests - for instance, that you are signed in - so you do not have to re-authenticate on every page.

3. Cookies we set

All cookies below are first-party and set by our authentication library; none are used for tracking.

Session cookie (e.g. better-auth.session_token) - keeps you signed in after authentication. Strictly necessary; HTTP-only; cleared on sign-out or expiry.
Security / CSRF cookies - protect sign-in and sensitive actions against cross-site request forgery. Strictly necessary and short-lived.
Sign-in flow cookies (OAuth state/PKCE and similar) - carry the login or consent state while you authenticate or connect an agent via OAuth. Strictly necessary; cleared once the flow completes.

4. Local storage

Our web app may store small amounts of data in your browser’s local storage - for example, your authenticated session state and interface preferences such as theme. This stays on your device, is used only to run the app, and is not a tracking technology.

5. Analytics and third-party cookies

With your consent, our marketing website (squadbear.com) uses Google Analytics to understand how the site is used. Google Analytics sets first-party cookies such as _ga and _ga_* (they distinguish visitors and persist for up to two years), and usage data is processed by Google LLC under its own privacy terms. Nothing from Google loads, and none of these cookies are set, unless you choose “Accept” in the cookie banner; if you reject or make no choice, the site works identically. The web app (app.squadbear.com) itself contains no analytics scripts. If you choose to sign in with Google or Microsoft, or pay via Stripe, those providers may set their own cookies on their own domains during that interaction, governed by their respective policies.

6. Managing cookies

You can change or withdraw your analytics consent at any time via the “Cookie settings” link in the footer of squadbear.com - withdrawing removes Google Analytics cookies and stops any further collection. Your choice is remembered for 12 months, after which we ask again. You can also block or delete cookies in your browser settings, but blocking strictly-necessary cookies will prevent sign-in and core features from working.

7. Changes to this Policy

We may update this Cookie Policy from time to time. We will post the new version here and update the date above.

8. Contact us

Questions about cookies? Contact privacy@squadbear.com.