Cookie Policy
Last updated: September 25, 2026
Where this policy applies
The marketing site (emailens.dev) is served from Cloudflare Pages with Cloudflare CDN and TLS at the edge. Sign-in, dashboard, and API cookies are set on app.emailens.dev when you use the web application.
The web application and API (app.emailens.dev) run in Docker containers on a Hostinger KVM virtual server in Europe, managed with self-hosted Coolify.
What are cookies?
Cookies are small text files stored on your device when you visit a website. They help the site remember your preferences, keep you signed in, and understand how you use the service. Some cookies are strictly necessary for the site to function, while others help us improve your experience.
How Emailens uses cookies
Emailens uses a minimal set of cookies. We do not use advertising cookies, tracking pixels, or third-party marketing cookies. Our cookies fall into two categories:
- Essential cookies, required for authentication and core functionality. The site cannot function properly without these.
- Analytics cookies, help us understand usage patterns through anonymous, aggregated data. These can be declined without affecting functionality.
Cookies we use
better-auth.session_token Essential Authenticates your session after sign-in. Required for accessing your dashboard, saved previews, and API keys.
__Secure-better-auth.session_token Essential Secure variant of the session cookie, used on HTTPS connections to prevent session hijacking.
better-auth.session_data / __Secure-better-auth.session_data Essential Fast client-side cache of your authenticated session state to reduce server round-trips.
better-auth.csrf_token / better-auth.state / better-auth.pkce_code_verifier Essential Short-lived cryptographic tokens used during login and OAuth handshakes to protect against Cross-Site Request Forgery (CSRF).
op_* Analytics OpenPanel analytics cookies. Collects anonymous, aggregated usage data to help us improve features. Only loaded if you have not declined cookies.
Local storage
In addition to cookies, Emailens uses your browser's local storage to persist preferences and cache data locally on your device. Local storage data is never sent to our servers automatically, it stays on your device.
theme Stores your color scheme preference ("dark" or "light") so the app respects your choice across page loads.
cookie-consent Records whether you accepted or declined cookies ("accepted" or "declined"). Prevents the consent banner from reappearing and conditionally loads or suppresses analytics.
emailens:handoff Temporarily holds email source code passed from public testing tools into the dashboard editor across navigation or sign-in.
emailens:pending-claim Preserves an unauthenticated preview ID during sign-up so the initial preview is saved to your newly created account.
emailens:first_touch Records initial organic landing page attribution (archetype and path) once per device to measure which content brought you to Emailens.
renderle Stores your daily email CSS puzzle game progress, streak, guesses, and statistics locally on your device.
emailens:sidebar-footer-open Remembers whether the dashboard sidebar user profile menu is expanded or collapsed.
emailens:settings:sections Remembers expanded or collapsed accordion section states on the dashboard Settings page.
emailens:whats-new:seen Stores the timestamp/version of the last viewed product update to prevent repeat changelog notifications.
emailens:coachmark:* Remembers dismissed states for interactive tutorial callouts and feature hints so they never nag you once closed.
emailens:feedback:* Records whether in-app feedback prompts or satisfaction ratings have been dismissed or submitted.
emailens:onboarding:* Stores dismissal and intent states for first-run onboarding guides and hints.
emailens:second-action / emailens:activated Tracks key product milestone completion locally to present contextual next steps during onboarding.
pending_email_verification_* Temporarily holds your proposed new email address in settings while you complete confirmation from your inbox.
Session storage
Emailens also uses your browser's session storage to preserve temporary workflow states during your active browsing session. Unlike local storage, session storage data is deleted automatically as soon as you close your browser tab.
auth_callback_url Preserves the target page you were trying to access before signing in, so you are redirected back immediately after authentication.
emailens:build-stash Preserves your in-progress AI builder prompt across the authentication redirect so you do not lose your brief when logging in.
emailens:pseo:handoff Safely transfers large HTML snippets from public email compatibility checkers into the studio editor for editing.
op_identified:* Prevents redundant analytics identification calls within a single active browser session.
Managing cookies & storage
You can control cookies and local storage through several methods:
- Cookie consent banner, when you first visit Emailens, you can accept or decline non-essential cookies. If you decline, analytics scripts are not loaded. Your choice is stored in local storage.
- Browser settings, most browsers allow you to block or delete cookies through their privacy settings. Note that blocking essential cookies will prevent sign-in and other core features from working.
- Clear local & session storage, open your
browser's developer tools (F12), go to the Application or
Storage tab, and clear storage data for
emailens.devandapp.emailens.dev.
Third-party services
We use the following third-party services that may set cookies:
- Cloudflare, serves the marketing site (Pages), CDN, TLS, and may process standard request metadata at the edge. See Cloudflare's Privacy Policy .
- Hostinger, EU KVM infrastructure where the application runs in Docker (managed with Coolify). Hostinger may process server access logs. See Hostinger's Privacy Policy .
- OpenPanel, self-hosted product analytics. Collects page views and feature interactions. Only loaded if you have not declined non-essential cookies. See OpenPanel .
- Supabase, provides our database infrastructure. Supabase does not set cookies in your browser. See Supabase's Privacy Policy .
- Google & GitHub OAuth, if you sign in with Google or GitHub, their authentication flow may set cookies on their own domains. Emailens does not control these cookies.
Changes to this policy
We may update this Cookie Policy from time to time to reflect changes in the cookies we use or for legal, operational, or regulatory reasons. The "Last updated" date at the top of this page indicates when the policy was last revised.
Contact us
If you have questions about our use of cookies, please reach out at support@emailens.dev .
See also: Privacy Policy / Terms of Service / Security & Trust