Webstead uses a short list of cookies to run the Service. We don't use advertising or third-party analytics cookies, so there's no cookie consent banner on this site — everything we set is "strictly necessary" under GDPR/ePrivacy rules, meaning it's required for the Service to function and doesn't need opt-in consent.
| Cookie | Purpose | Duration |
|---|---|---|
webstead_session | Keeps you signed in to your dashboard. Essential — without it you'd be logged out on every page load. | Session / until logout |
dwb-theme | Remembers whether you chose light or dark mode, so it doesn't flash back to the default on your next visit. | 1 year |
webstead_github_oauth_state | A short-lived security token used only during the "Connect GitHub" flow, to confirm the OAuth redirect wasn't tampered with. | A few minutes, cleared automatically after the connection completes |
If you purchase cycle top-ups, Stripe's checkout page (hosted on stripe.com, not webstead.app) may set its own cookies while you're on that page. Those are governed by Stripe's privacy policy, not this one.
Because every cookie above is essential to signing in, staying signed in, or completing a payment, blocking them will break those specific features (you won't be able to stay logged in, for example). Your browser's settings let you block or delete cookies at any time if you'd prefer.
If that ever changes — for example, if we introduce optional analytics in the future — we'll update this page, add the appropriate consent mechanism, and update the "Last updated" date above.
Questions about cookies or tracking: support@webstead.app.