Cookies & Analytics Policy
Last updated: 15 September 2026
This policy explains the cookies and similar technologies used on shotward.com and in the Shotward workspace. We keep them to a minimum: we use strictly necessary cookies to keep you signed in and do not use advertising or analytics cookies.
What cookies and browser storage are
Cookies are small text files that a website stores in your browser. Similar technologies, such as local storage and session storage, let a site save information in your browser. Under the Privacy and Electronic Communications Regulations, strictly necessary cookies and storage can be used without consent; other types need your consent.
Strictly necessary cookies
These cookies are set by our authentication system when you sign in. The service cannot work without them, so they cannot be switched off. On https://shotward.com, their names begin with “__Secure-”.
| Cookie | Purpose | Duration |
|---|---|---|
| better-auth.session_token | Keeps you signed in and secures requests to your workspace | Up to 7 days, renewed while you remain active; removed when you sign out |
| better-auth.state | Protects Google sign-in against forged requests while the sign-in completes | 5 minutes |
Functional browser storage
Inside the workspace, we use your browser’s storage to remember choices you make. This information stays on your device and is used only to provide the feature you are using.
| Name | Type | Purpose |
|---|---|---|
| wizard-v1 | Session storage | Keeps an in-progress creation draft while you move between steps; cleared when the browser tab closes or you sign out |
| favorites-v1 | Local storage | Remembers the casting models and poses you mark as favourites on this device |
Product analytics
We use PostHog, through its EU-hosted service, to understand which pages are used so we can improve Shotward. We have configured it to be privacy-conscious:
- it stores nothing in your browser: no analytics cookies and no local storage, so each page visit is not linked to earlier visits;
- it records page views using the page path only, without query strings;
- automatic click and interaction tracking is switched off; and
- session recording is switched off.
Each page view includes standard technical information sent by the analytics library, such as browser, operating system, device type, screen size and referring website. PostHog may use your IP address to estimate your approximate location. We rely on our legitimate interests for this processing; you can object at any time by contacting privacy@shotward.com, or block it using a browser extension or your browser’s tracking protection.
Error monitoring
We use Sentry to detect and fix errors. Error reports include technical details about the error and your browser. Before a report is sent, we remove request headers, cookies, request bodies and query strings. Sentry does not set cookies on our site.
Third-party sites
When you sign in with Google or pay through Stripe’s checkout and customer portal, you are taken to pages operated by those companies, which use their own cookies under their own policies.
Managing cookies
You can delete or block cookies in your browser settings. If you block strictly necessary cookies, you will not be able to sign in. Public pages of our website remain available without cookies.
Changes to this policy
If we introduce cookies or technologies that require consent, we will ask for your consent before using them and update this policy. For questions, contact privacy@shotward.com.