Cookies and browser storage

Necessary account and security storage

Bring With uses necessary first-party authentication cookies to sign you in, protect authentication challenges and keep the session you request. These are not advertising or analytics cookies. We do not add a consent banner for these necessary functions.

The secure session cookie (__Secure-bringwith.session_token) normally lasts up to 7 days, or only the browser session when the don't-remember option applies. A two-factor challenge cookie (__Secure-bringwith.two_factor) lasts up to 10 minutes. A passkey challenge cookie (__Secure-bringwith.better-auth-passkey) lasts up to 5 minutes. A don't-remember marker may last for the browser session. Cookies are first-party and authentication cookies are HTTP-only, Secure and SameSite protected. They can be cleared earlier on completion or sign-out.

The app uses a session-bound CSRF value in application memory for authorized requests. Decorative palette animation state is held in memory, without localStorage or sessionStorage persistence. The display follows your device's color preference without storing an advertising identifier.

Blocking necessary cookies can prevent sign-in or security verification. You can clear cookies in your browser. External payment pages and services you choose have their own notices; see the privacy and provider pages for their roles. If we introduce nonessential tracking or storage, we will update this notice and obtain consent where required before using it.