Cookies and storage
Which technologies are used on your device — and which are not.
23 September 2026
In short
Readoc uses necessary cookies for sign-in and account security. Optional Google sign-in adds short-lived security cookies. We use no analytics, advertising or marketing cookies, so no consent banner is shown.
What is actually set
| Technology | Purpose | Classification | Lifetime |
|---|---|---|---|
| Session cookie (Better Auth) | sign-in and account security | necessary, § 25(2)(2) TDDDG | up to 30 days |
| OAuth state/PKCE (only for Google sign-in) | protects the sign-in flow against attacks | necessary, § 25(2)(2) TDDDG | a few minutes |
In production these cookies are set with the HttpOnly and Secure attributes and an appropriate SameSite value.
What is not used
- no analytics or audience measurement
- no advertising or marketing cookies, and no fingerprinting
- no session replay and no A/B testing
- no localStorage or sessionStorage used for tracking
If this changes
If analytics, marketing or other non-essential technologies are introduced in future, they will be technically blocked until valid consent is given. We would then introduce genuine consent management with an equally prominent reject option, granular choices, logging and withdrawal at any time.