Cookie policy

Done City uses a small number of cookies. Under the Privacy and Electronic Communications Regulations (PECR) we may set cookies that are strictly necessary without asking; anything else needs your consent first. When you first visit, a banner asks whether you allow analytics and marketing cookies. "Accept all" and "Reject all" are equally easy, and nothing optional is set until you choose. You can change your choice at any time with "Cookie settings" at the bottom of every page, or, when signed in, under Account > Privacy.

Strictly necessary cookies

• consent: Remembers your cookie choices (analytics / marketing, and when you chose). If you are signed in, your choices are also stored with your account. Expires: 12 months.
• better-auth.session_token (or __Secure-better-auth.session_token): Keeps you signed in. Expires: When you sign out, or 30 days after you last used Done City.
• Other better-auth.* and sign-in cookies: Short-lived values that protect sign-in flows: OAuth state with Google or Apple and passkey challenges (state, better-auth-passkey, 5 minutes) and two-factor sign-in (two_factor, 10 minutes). If you tick "Trust this device for 30 days" at two-factor sign-in, trust_device remembers it for 30 days.
• pc_onboarding_return: Brings you back to the right step of setting up your city after you connect a tool. Expires: 15 minutes.
• citybuilder_ios_connect: Links a tool you connect from our iOS app back to the app. Expires: 10 minutes.
• sso_confirm (or __Secure-sso_confirm): Protects linking a work single sign-on account to your account. Expires: 10 minutes.

Stripe sets cookies on payment pages to prevent fraud. See Stripe's cookie policy. Some forms (such as sign-in and feedback) may show a Cloudflare Turnstile check to stop bots, which is strictly necessary for security; see Cloudflare's Turnstile privacy addendum.

Invite links

• referral_code: If you open someone's invite link, remembers their invite code so we can credit them when you sign up. It holds only the code. Expires: 30 days, or as soon as your sign-up is credited.

Preferences

• theme (local storage, not a cookie): remembers light or dark mode.

Analytics cookies (only with your consent)

We use PostHog (its EU cloud, hosted in the EU) to understand how the site is used: which pages are viewed and which links and buttons are clicked. We do not record sessions, we do not store your IP address with events, and if you are signed in we identify you only by an internal account id, never by your name or email.

• ph_<project key>_posthog (cookie and local storage): A random id that groups your page views and clicks. Expires: 1 year.

If you withdraw consent, analytics stops immediately and no further data is sent.

Marketing cookies (only with your consent)

We currently set no marketing cookies. The banner asks in advance so that adding one later doesn't need a new prompt. Before we add one, we will list it here (name, provider, purpose and expiry).

Managing cookies

You can block or delete cookies in your browser settings, but you will not be able to sign in without the session cookie.

Questions: privacy@donecity.app