Cookie Policy
The few cookies and browser storage items cusp.run and app.cusp.run use. No analytics, advertising or third-party cookies.
Last updated
We keep this short because there isn't much to say: Cusp doesn't use analytics, advertising or third-party cookies, on the website or in the web app. We use only the cookies and browser storage needed to sign you in, keep you secure and remember choices you make. Because these are strictly necessary, we don't ask for consent, but we do tell you about them here.
Cookies
| Name | Set by | What it does | Lasts |
|---|---|---|---|
cusp-locale | cusp.run and app.cusp.run (shared across .cusp.run) | Remembers the language you chose | 1 year |
__Secure-cusp.session_token | app.cusp.run (shared across .cusp.run) | Keeps you signed in. Secure, HTTP-only | Up to 30 days, renewed while you use Cusp |
__Secure-cusp.state, __Secure-cusp.better-auth-passkey, __Secure-cusp.dont_remember | app.cusp.run (shared across .cusp.run) | Short-lived sign-in and security state: during GitHub or Apple sign-in, while you add or use a passkey, and when you choose not to stay signed in | A few minutes, or until you close the browser |
Browser storage
We also store a few items in your browser's local storage. They don't leave your device unless the feature needs them to:
| Item | Where | What it does |
|---|---|---|
| Theme | cusp.run, app.cusp.run | Light or dark mode |
cusp-cloud-token, cusp-cloud-account | app.cusp.run in a browser | Keeps the web app signed in to the Cusp cloud, and remembers which email you used |
| Interface state | app.cusp.run | Panel sizes, open tabs, queued messages, inbox state and similar settings |
| OpenRouter connection | app.cusp.run | A one-time code used while you connect an OpenRouter account; deleted when the connection finishes |
The desktop app uses the same interface but stores its sign-in token in your operating system's credential store, not in browser storage.
Third parties
When you pay, you're taken to Stripe's checkout or billing pages, which set their own cookies for fraud prevention and to process the payment. These are set by Stripe on Stripe's domains under Stripe's cookie policy. Shared artifacts served from our user-content domain don't set cookies.
Managing cookies
You can delete or block cookies in your browser settings. If you block the sign-in cookies, you won't be able to sign in to the web app. If you delete cusp-locale, the site will choose a language from your browser settings.
Changes
If we ever add a cookie that isn't strictly necessary, such as analytics, we'll update this page first and ask for your consent before setting it.
Questions: privacy@cusp.run. See also our Privacy Policy.