Legal

Cookie Policy

Draft — prepared for legal reviewLast updated 2026-10-23

Webstead uses a short list of cookies to run the Service. We don't use advertising cookies or cookie-based analytics, so there's no cookie consent banner on this site — everything we set is "strictly necessary" under GDPR/ePrivacy rules, meaning it's required for the Service to function and doesn't need opt-in consent.

Cookies we set

CookiePurposeDuration
webstead_sessionKeeps you signed in to your dashboard. Essential — without it you'd be logged out on every page load.Session / until logout
dwb-themeRemembers whether you chose light or dark mode, so it doesn't flash back to the default on your next visit.1 year
webstead_github_oauth_stateA short-lived security token used only during the "Connect GitHub" flow, to confirm the OAuth redirect wasn't tampered with.A few minutes, cleared automatically after the connection completes

If you purchase cycle top-ups, Stripe's checkout page (hosted on stripe.com, not webstead.app) may set its own cookies while you're on that page. Those are governed by Stripe's privacy policy, not this one.

What we don't use

  • No advertising or retargeting cookies
  • No cookie-based analytics (Google Analytics, etc.)
  • No cross-site tracking of any kind

Cookieless analytics

We count page views on webstead.app with Umami, a privacy-focused analytics tool that sets no cookies and stores nothing on your device. It records the page visited, referrer, browser, device type and country, without query strings. Visitors aren't identified or followed across sites, and IP addresses aren't stored. Because nothing is stored on your device, it needs no consent banner. Blocking the /analytics.js script in your browser turns it off for you.

Managing cookies

Because every cookie above is essential to signing in, staying signed in, or completing a payment, blocking them will break those specific features (you won't be able to stay logged in, for example). Your browser's settings let you block or delete cookies at any time if you'd prefer.

Changes to this policy

If that ever changes — for example, if we introduce optional analytics in the future — we'll update this page, add the appropriate consent mechanism, and update the "Last updated" date above.

Contact

Questions about cookies or tracking: support@webstead.app.