Cookies
Every cookie this dashboard sets, what it holds, and how long it lasts. There are six, all first-party, and none of them track you.
Last updated 28 August 2026
There is no cookie-based tracking here
This dashboard sets no advertising cookie, no analytics cookie and no third-party cookie. It does not load Google Analytics, a pixel, or a session recorder. Nothing below follows you to another site, because nothing below is readable by one.
After sign-in, ordinary product events such as opening onboarding or completing a run are stored first-party against the account. They use the existing session, set no additional cookie, contain no typed prompt or page content, and support activation, health scoring and weekly value summaries.
That is also why there is no consent banner. Every cookie listed here is strictly necessary to sign in, complete a payment or remember a layout preference — and a banner that asks permission to keep you signed in teaches people to click “accept” without reading, which makes the banners that matter useless.
What is set, and when
| Name | Purpose | Lifetime |
|---|---|---|
aeo_session | Keeps you signed in. Holds your user id, email and sign-in stage, signed so it cannot be edited — set stage=authenticated by hand and the signature fails. Signed rather than encrypted, because none of it is secret; what must be impossible is forging it. | 30 days, or until you sign out |
aeo_oauth_state, aeo_oauth_verifier, aeo_oauth_provider | Set only when you choose “Continue with Google/GitHub”. They tie the request that left this site to the answer that comes back, which is what stops somebody else's sign-in being completed in your browser. | Minutes — deleted as soon as you return |
aeo_pay_state | Set only when you start a checkout. Matches the order PayPal sends back to the one this browser opened, so a payment cannot be attributed to the wrong account. | The length of the checkout |
aeo_nav | Remembers whether you collapsed the sidebar. Read on the server so the page renders at the right width instead of snapping after it loads. Holds one word. | 1 year |
Turning them off
You can clear or block them in your browser. Blocking aeo_session means you cannot stay signed in; blocking the OAuth or payment ones means those flows cannot complete. Blocking aeo_nav costs you nothing but a sidebar that forgets.