__Secure-next-auth.session-token
GeoCurves · essential
Keeps you signed in using an encrypted session token. Large tokens may use .0, .1 and later cookie suffixes.
Duration: Up to 30 days; active session refresh can renew this period.
GeoCurves Privacy Center
Cookie Policy
Necessary storage and optional Google Analytics, with controls you can change at any time.
Last updated: 2026-09-03
What cookies do here
Cookies help provide secure sign-in and remember your privacy choices. With your permission, Google Analytics 4 measures visits and navigation so we can improve GeoCurves. Its script and analytics cookies load only after you choose Allow analytics. Advertising features are disabled.
Use Cookie settings in the footer to allow or decline analytics at any time. Declining, a saved Do Not Sell or Share choice, or Global Privacy Control prevents analytics collection. Registration and continued browsing are not consent. Necessary authentication and security processing continues regardless of your analytics choice.
Cookie inventory
These names describe the production HTTPS service. Authentication and the geocurves_privacy cookie are Secure, HttpOnly and SameSite=Lax. The analytics choice is readable by our page script so it can apply your preference. Cloudflare items are conditional, not a claim that each is present in your browser.
__Secure-next-auth.callback-url
GeoCurves · essential
Remembers the permitted return location during authentication.
Duration: Session cookie; browser session-restore settings can affect removal.
__Host-next-auth.csrf-token
GeoCurves · essential
Helps protect authentication forms against forged requests.
Duration: Session cookie; browser session-restore settings can affect removal.
geocurves_privacy
GeoCurves · privacy preference
Records a requested Do Not Sell or Share choice. Contains only the choice, not an email, account ID or unique tracking identifier.
Duration: 180 days after saving or receiving a GPC signal.
geocurves_analytics
GeoCurves · privacy preference
Remembers whether you allowed or declined optional analytics. It contains only granted or denied, not a unique identifier.
Duration: 180 days after saving your choice.
_ga and _ga_3N04W07V4S
Google Analytics · optional
After you allow analytics, distinguishes visits and maintains session information for usage reports. Advertising features are disabled.
Duration: Configured for up to 180 days, renewed with activity. Removed from this browser when analytics is declined.
__cf_bm (if issued)
Cloudflare · security
May distinguish legitimate visitors from automated traffic if the corresponding bot protection is enabled.
Duration: Normally expires after 30 minutes of inactivity, when used.
cf_clearance (if issued)
Cloudflare · security
May remember a passed security challenge. It is not required on every visit.
Duration: Set by the active Cloudflare challenge configuration; see the cookie’s actual expiry in your browser.
Cloudflare’s processing and cookie lifetimes depend on the protections in use. See its official cookie documentation. Network security processing may occur outside Hong Kong.
Google Analytics
Google receives usage information such as page addresses, referring pages, browser and device information, and analytics cookie identifiers after you allow analytics. Google also processes connection information to receive those requests. We do not add names, email addresses, passwords or report contents to analytics events, and do not enable Google advertising signals or personalized ads.
Google may process information outside Hong Kong. See Google’s Privacy Policy. Withdrawing permission stops future collection; it does not erase information already received by Google. Use our Privacy Center for questions about previously collected information.
Other browser storage
Our authentication library can write a local-storage key called nextauth.message to synchronize sign-in/sign-out events across tabs. It contains a session event and timestamp, not your password or session token. It has no automatic expiry and can remain until overwritten or cleared in your browser.
Browsers may cache same-origin scripts, styles, icons and images to load the service efficiently. This is not an advertising identifier. We do not use browser fingerprinting or a third-party favicon/remote-font tracker as part of the application.
Workspace display preferences
When you choose a display setting, GeoCurves stores it on this device using keys beginning gc:sidebar, gc:table-density, gc:columns:, gc:view:, gc:favorites: and gc:workspace-view. These remember sidebar state, visible columns, table density, your saved filter view, project favorites and workspace layout. Some keys include a project path or account ID to keep your choices separate. A saved view may include search text you explicitly choose to save.
These settings are not sent to advertisers, do not contain passwords or session tokens, and are not synchronized across devices. We do not store Reddit post content or discussion-derived search text in these preferences. They have no automatic expiry; clear site storage to remove them. If storage is blocked, choices work only for the current page session.
Your controls
Save a choice on the Do Not Sell or Share page at any time. We also honor Global Privacy Control. You do not need to create an account to use this control.
You can inspect or clear site cookies and local storage in your browser settings. Clearing authentication cookies signs you out; blocking all cookies can prevent login. Clearing the privacy cookie removes that browser’s saved preference, although an active GPC signal or saved account preference can still apply. Declining optional tracking does not turn off required security processing.
Questions? Email info@onetapseo.com or use our Privacy Center.