FamFirst uses as few cookies as possible: only the ones needed to sign you in and keep you signed in. There are no analytics, advertising or tracking cookies, and we don't load scripts or fonts from other companies' servers.
Cookies we set
| Cookie | Why | How long |
|---|---|---|
better-auth.session_token |
Keeps you signed in. Without it you'd have to sign in on every page. | 7 days, renewed while you use FamFirst |
better-auth.state, better-auth.oauth_state |
Protects the Google sign-in step against forgery. | 5 to 10 minutes, during sign-in only |
On the live site these names start with __Secure-, which means browsers only send them over HTTPS. All of them are first-party (set by FamFirst), marked HttpOnly where possible so page scripts can't read them, and only exist if you sign in. If you just read the site or try a sample report, no cookies are set.
Things stored in your browser that aren't cookies
ff-cookie-notice(local storage) remembers that you've closed the cookie notice.- Page previews of a report you've just uploaded are kept in the open tab's memory and disappear when you close it.
Google sign-in
When you choose "Continue with Google", you go to Google's own sign-in page, where Google's cookies and privacy policy apply. We don't control those.
Your choices
Because these cookies are strictly necessary for signing in, the site can't work signed-in without them. You can block or delete cookies in your browser settings; you'll be signed out. If we ever add optional cookies, such as analytics, we'll ask for your consent first and update this page.
Questions: hello@gendev.studio.