Cookie Policy
Effective October 20, 2026. This page lists every cookie and every piece of browser storage wxdeck uses on wxdeck.com.
The short version
Because every cookie we set is strictly necessary, we do not show a cookie consent banner. If we ever add analytics or anything else that is not strictly necessary, we will update this policy first and ask for your consent before setting it.
1. Cookies
| Name | Purpose | Duration | Party | Type |
|---|---|---|---|---|
wxdeck_gate | Preview access. Set only if you open a private access link, to remember that this browser was let in before sign-in existed; it will be retired. HTTP-only, so page scripts cannot read it; sent only over HTTPS. | 1 year | First party | Strictly necessary |
__Secure-authjs.session-token | Keeps you signed in after you sign in with Google. An encrypted token holding your account id, name, email and picture. HTTP-only, HTTPS-only. | 30 days, renewed while you use the app | First party | Strictly necessary |
__Host-authjs.csrf-token | Protects sign-in and sign-out against cross-site request forgery. HTTP-only, HTTPS-only. | Until you close the browser | First party | Strictly necessary |
__Secure-authjs.callback-url | Remembers which page to return you to after signing in. HTTP-only, HTTPS-only. | Until you close the browser | First party | Strictly necessary |
__Secure-authjs.pkce.code_verifier | Set only while you are signing in, to check that the reply from Google belongs to the sign-in you started. HTTP-only, HTTPS-only. | 15 minutes, deleted once sign-in completes | First party | Strictly necessary |
Signing in with Google takes you to Google’s own sign-in page, where Google’s cookies and cookie policy apply. Google does not set cookies on wxdeck.com.
2. Browser storage that is not a cookie
| Name | Purpose | Duration | Party | Type |
|---|---|---|---|---|
wxdeck:settings:v1 | Local storage. Your display settings — layers, units, map style. Never sent to our servers. | Until you clear site data | First party | Strictly necessary (remembers a choice you made) |
| Service worker and push subscription | Only if you turn on alerts: lets your browser receive and show alert notifications. | Until you turn alerts off or clear site data | First party | Strictly necessary for the alerts you asked for |
3. Your choices
You can block or delete cookies and site data in your browser’s settings. If you block the cookies above, sign-in and access will not work; if you clear local storage, your settings return to their defaults. We honour Global Privacy Control signals, as described in our Privacy Policy.
4. Contact
Questions about this policy: privacy@wxdeck.com.