__Secure-next-auth.session-token
GeoCurves · essential
Keeps you signed in using an encrypted session token. Large tokens may use .0, .1 and later cookie suffixes.
Duration: Up to 30 days; active session refresh can renew this period.
GeoCurves Privacy Center
Cookie Policy
Necessary storage, explained. No optional analytics or advertising trackers are currently installed in GeoCurves.
Last updated: 2026-09-03
What cookies do here
Cookies are small values your browser sends back to a website. We use them to provide secure sign-in and remember privacy choices you request. We do not offer a misleading “accept all” control for tracking technologies that are not installed.
Essential authentication and security processing continues without advertising consent. If we introduce a non-exempt optional technology, we will update this inventory and implement the required choice before enabling it. Registration or continued browsing is not treated as that choice.
Cookie inventory
These names describe the production HTTPS service. Authentication and preference cookies are Secure, HttpOnly, SameSite=Lax and restricted to this host. Cloudflare items are conditional, not a claim that each is present in your browser.
__Secure-next-auth.callback-url
GeoCurves · essential
Remembers the permitted return location during authentication.
Duration: Session cookie; browser session-restore settings can affect removal.
__Host-next-auth.csrf-token
GeoCurves · essential
Helps protect authentication forms against forged requests.
Duration: Session cookie; browser session-restore settings can affect removal.
geocurves_privacy
GeoCurves · privacy preference
Records a requested Do Not Sell or Share choice. Contains only the choice, not an email, account ID or unique tracking identifier.
Duration: 180 days after saving or receiving a GPC signal.
__cf_bm (if issued)
Cloudflare · security
May distinguish legitimate visitors from automated traffic if the corresponding bot protection is enabled.
Duration: Normally expires after 30 minutes of inactivity, when used.
cf_clearance (if issued)
Cloudflare · security
May remember a passed security challenge. It is not required on every visit.
Duration: Set by the active Cloudflare challenge configuration; see the cookie’s actual expiry in your browser.
Cloudflare’s processing and cookie lifetimes depend on the protections in use. See its official cookie documentation. Network security processing may occur outside Hong Kong.
Other browser storage
Our authentication library can write a local-storage key called nextauth.message to synchronize sign-in/sign-out events across tabs. It contains a session event and timestamp, not your password or session token. It has no automatic expiry and can remain until overwritten or cleared in your browser.
Browsers may cache same-origin scripts, styles, icons and images to load the service efficiently. This is not an advertising identifier. We do not use browser fingerprinting or a third-party favicon/remote-font tracker as part of the application.
Workspace display preferences
When you choose a display setting, GeoCurves stores it on this device using keys beginning gc:sidebar, gc:table-density, gc:columns:, gc:view:, gc:favorites: and gc:workspace-view. These remember sidebar state, visible columns, table density, your saved filter view, project favorites and workspace layout. Some keys include a project path or account ID to keep your choices separate. A saved view may include search text you explicitly choose to save.
These settings are not sent to advertisers, do not contain passwords or session tokens, and are not synchronized across devices. We do not store Reddit post content or discussion-derived search text in these preferences. They have no automatic expiry; clear site storage to remove them. If storage is blocked, choices work only for the current page session.
Your controls
Save a choice on the Do Not Sell or Share page at any time. We also honor Global Privacy Control. You do not need to create an account to use this control.
You can inspect or clear site cookies and local storage in your browser settings. Clearing authentication cookies signs you out; blocking all cookies can prevent login. Clearing the privacy cookie removes that browser’s saved preference, although an active GPC signal or saved account preference can still apply. Declining optional tracking does not turn off required security processing.
Questions? Email info@onetapseo.com or use our Privacy Center.