Last updated: 4 April 2026
🍪 Short version: StoatBoard uses strictly necessary cookies for authentication and security, plus first-party analytics storage (PostHog, hosted in Germany). No advertising cookies, no data brokers, no third-party marketing pixels.
Cookies are small text files placed on your device by a website when you visit it. They are widely used to make websites work correctly or more efficiently, and to provide information to the website operator.
These cookies are essential for the site to function. They cannot be disabled without breaking the service and do not require your consent under French CNIL guidelines (Article 82 of the French Data Protection Act).
| Name | Provider | Purpose | Expiry |
|---|---|---|---|
| next-auth.session-token / __Secure-next-auth.session-token | StoatBoard | Maintains your authenticated session after login (NextAuth session cookie). | 30 days (or on logout) |
| __cf_bm | Cloudflare | Bot management — distinguishes legitimate users from automated traffic. Set by Cloudflare on our domain. | 30 minutes |
| cf_clearance | Cloudflare | Records that you have passed a Cloudflare security challenge (if triggered). Prevents repeated challenges within a session. | Session / 1 year |
Cookie names starting with cf_ or __cf are set by Cloudflare as part of its CDN and security infrastructure. We do not control these cookies directly.
For usage analytics, StoatBoard uses PostHog, hosted on servers in Frankfurt, Germany (EU). PostHog stores analytics data using a combination of localStorage and a first-party cookie (ph_*) to maintain session continuity across page loads. For authenticated users, analytics may be associated with account identifiers in PostHog. Data is configured to stay in EU hosting.
| Name | Provider | Purpose | Expiry |
|---|---|---|---|
| ph_* | PostHog (EU) | Analytics/session identifier used to group events and session replay context. For signed-in users, events may be linked to account identifiers via first-party analytics. | 1 year |
PostHog is configured with autocaptureand session recording (passwords and sensitive inputs are masked by default). You can clear client-side analytics storage at any time by clearing this site's cookies and localStorage in your browser.
StoatBoard uses essential cookies and limited first-party analytics storage. You can manage or delete cookies at any time through your browser settings. Note that disabling session cookies will prevent you from staying logged in.
Instructions for common browsers:
If we introduce new cookies in the future, this policy will be updated accordingly with the "Last updated" date revised. If any new cookies require consent, we will implement an appropriate consent mechanism at that time.
For questions about our use of cookies, contact: [email protected]
Related legal documents: Privacy Policy · Terms of Service · Content Policy · DMCA / Takedown · Legal Notice.
Pulse+