Cookie Policy

This Cookie Policy explains exactly which cookies meetstack sets, why, and for how long. We keep this to the minimum necessary to run the service. We do not use analytics, advertising, or any third-party tracking cookies.

1. What cookies are

Cookies are small text files placed on your device by a web server. We use only server-set HttpOnly cookies, meaning they cannot be read or modified by JavaScript running in the page — this is a deliberate security measure.

2. Cookies we set

We set exactly two cookies, both only after you sign in:

Name	Purpose	Category	Expires
auth_token	Keeps you signed in between page loads. Contains a signed JWT token. HttpOnly, Secure, SameSite=Lax. Deleted on logout.	Strictly necessary	24 hours
dash_lang	Stores your preferred dashboard language so the interface is displayed in the correct language on every visit and during server-side rendering. HttpOnly, Secure, SameSite=Lax. Deleted on logout.	Functional	1 year

Neither cookie is set for visitors who are not signed in. Neither cookie is used for tracking, advertising, or analytics purposes.

3. Third-party cookies — Stripe

When you complete a payment, Stripe, Inc. may set cookies in your browser as part of its fraud detection and payment security systems. These cookies are governed by Stripe's Cookie Policy. We have no control over or access to those cookies. They are strictly necessary for secure payment processing.

4. What we do not use

• No analytics or tracking cookies (no Google Analytics, no Hotjar, no similar tools).
• No advertising or retargeting cookies.
• No social media cookies or pixels.
• No cross-site tracking of any kind.

5. Consent

Because we use only strictly necessary and functional cookies — and no analytics or marketing cookies — we do not display a cookie consent banner. The functional dash_lang cookie is set only after you log in and is essential for delivering the service in your chosen language. By creating an account and signing in, you acknowledge this use as described in our Privacy Policy.

6. Browser controls

You can delete or block cookies at any time through your browser settings. If you delete or block auth_token, you will be signed out and will need to log in again. Most browsers offer a "private" or "incognito" mode that does not persist cookies after you close the window.

7. Changes

If we introduce new cookies we will update this page and, if any new cookie requires consent, display an appropriate notice before setting it.

This document is published in several languages, and the English text governs. If a translation and the English text differ in meaning, the English text prevails.

8. Contact

Questions about our use of cookies? privacy@meetstack.io