Cookie Policy
todone uses only the cookies and browser storage it needs to work. No analytics, no ads, no tracking across sites, so there's nothing to accept or refuse.
Cookies
| Name | What it's for | How long |
|---|---|---|
better-auth.session_token | Keeps you signed in. | 7 days, renewed while you use the app; removed when you sign out |
better-auth.state and similar | Protects a GitHub or Google sign-in while it happens. | Minutes |
On a secure connection their names start with __Secure-.
Browser storage
| Name | What it's for |
|---|---|
theme | Remembers Day or Night. |
todone:saved | A copy of your lists so the app opens offline. Cleared when you sign out. |
todone:lists:v1 | Lists from before accounts; moved into your account once, then removed. |
todone:welcome | Shows the welcome haiku once per sign-in. Gone when you close the tab. |
| Service worker cache | Copies of the app's pages and code so it opens offline, and reminders you turn on. |
Controlling them
You can clear or block these in your browser's settings. If you block cookies, you can't sign in. More about your data is in the Privacy Policy.
Last updated 2 November 2026.