Cookies & browser storage

About browser storage

Cookies support sign-in and secure access. Local storage keeps drafts and preferences; session storage helps restore work in the current tab. Each has a different purpose and lifetime.

Storage is used when its feature is needed. We obtain consent for optional uses where required.

Storage we use

The table below lists application storage names, purposes and configured lifetimes. Signing out, browser limits or clearing site data may shorten those lifetimes. Expiry does not delete server account records or backups.

__Secure-better-auth.session_token

First-party, HTTP-only sign-in cookie

Keep an authenticated session and support the Google sign-in return.

Lifetime: Configured for up to 7 days per issue; an active session can be renewed. Sign-out expires the application cookie. Production uses Secure, SameSite=Lax and Path=/.

__Secure-better-auth.session_data

First-party, HTTP-only session-cache cookie

Cache session information to reduce repeated session reads. It is separate from the server account record.

Lifetime: Configured for up to 1 hour; it can be refreshed. Production uses Secure, SameSite=Lax and Path=/.

__Secure-better-auth.state

First-party, HTTP-only Google sign-in state cookie

Bind the temporary Google sign-in return to the browser that started it.

Lifetime: 5 minutes, and expired when the callback is consumed. Production uses Secure, SameSite=Lax and Path=/. Server-side OAuth verification has a separate 10-minute validity window.

NEXT_LOCALE

Cookie, when a language preference is saved

Remember the selected locale for language routing.

Lifetime: Session cookie with no fixed Max-Age or Expires configured; the browser manages the session and may restore it. Path=/; SameSite=Lax.

theme

Local storage, when a theme choice is saved

Remember a chosen light, dark or system appearance where theme controls are available.

Lifetime: Persists until changed or cleared; no automatic expiry is set. It does not grant account or purchase access.

song_gift_<id>

HTTP-only gift-access cookie

Carry temporary access to the specific gift endpoint after a valid link is opened.

Lifetime: 30 minutes. The gift link has separate expiry, revocation and purchase checks.

tailormysong-prototype-v2

Local storage

Keep the editable creator draft and its current step on this device.

Lifetime: Persists until replaced or cleared; no automatic time expiry is set for this draft.

tailormysong-library-v1

Local storage for examples

Keep local example song, order and gift data. It does not grant purchased access.

Lifetime: Persists until replaced or cleared; this is separate from real account records.

tailormysong-auth-return-v1

Session storage in this tab

Temporarily keep registered editable fields for a sign-in return.

Lifetime: Accepted for up to 1 hour and consumed on restoration; otherwise removed with the tab’s session storage.

tailormysong-search-entry-v1

Session storage in this tab

Carry bounded starting text from a scene or tool page to the creator.

Lifetime: Consumed on retrieval and accepted only within 1 hour.

Analytics and advertising

Optional analytics, advertising and affiliate tracking are disabled. Cloudflare’s optional browser performance measurement (RUM) is also disabled. Network delivery, security and operational request records remain in use.

Signing in is not consent to optional tracking. Before adding optional tracking or a new storage purpose, we update this notice and provide any required choice. Disabling tracking does not delete earlier provider records.

External services

Google sign-in uses Google’s own pages and cookies; your profile image may also request data from Google. Clearing this site’s storage does not clear Google cookies or remove your Google connection.

Cloudflare may use security cookies when protections require them. Their presence and lifetime depend on the protection and request. Network delivery also processes request information without cookies.

Waffo checkout, Zoho Mail and other linked services have their own storage and policies.

Your controls

Use your browser’s site-data settings to view, block or clear cookies and storage for tailormysong.com. Clearing data may sign you out, remove drafts or interrupt gift access. Blocking storage may prevent sign-in or draft recovery.

Closing a window may not end a restored browser session. Sign out on shared devices. Clearing site data does not delete server records, downloads or provider-held copies; use account deletion or contact us for those requests.

Updates and contact

We update this notice and its effective date when storage changes. Email support@tailormysong.com with questions. Never send cookie values, sign-in tokens or complete private gift links.