Cookie Policy
2. Cookies We Use
| Cookie name | Purpose | Type |
|---|---|---|
| next-auth.session-token | Authentication - keeps you logged in. HttpOnly, Secure, SameSite=Lax. | Session / Persistent |
| next-auth.csrf-token | CSRF protection - prevents cross-site request forgery on form submissions. | Session |
| next-auth.callback-url | Remembers where to redirect you after login. | Session |
| lattice-brand | Remembers the site theme so pages load with the right colors. | Persistent (1 year) |
LocalStorage (not cookies)
In addition to cookies, JoinLattice uses your browser's localStorage to store your light/dark mode preference, your accessibility settings, and which notices you have dismissed. This data stays on your device and is never transmitted to our servers.
3. Duration
- Session cookies (next-auth.csrf-token, callback-url) - deleted when you close your browser.
- Authentication cookie (next-auth.session-token) - persists for 7 days, then expires. Signing out deletes it immediately.
- LocalStorage - persists until you clear your browser's local storage or explicitly change your theme preference.
4. Third-Party Cookies
JoinLattice does not use third-party advertising cookies, social media tracking pixels, or cross-site analytics cookies.
Our payment processor Stripe may set cookies when you visit our billing pages. These are governed by Stripe's Privacy Policy and are used to detect fraud and secure your payment session.
5. Managing Cookies
You can control and delete cookies through your browser settings:
- Chrome - Settings > Privacy and Security > Cookies and other site data
- Firefox - Settings > Privacy & Security > Cookies and Site Data
- Safari - Preferences > Privacy > Manage Website Data
- Edge - Settings > Cookies and Site Permissions
Note: Deleting the JoinLattice session cookie will sign you out. Because we only use essential cookies, there is no way to use JoinLattice while blocking all cookies - the authentication cookie is required for the platform to function.
6. Contact
Questions about our cookie practices? hello@joinlattice.app
