Cookies and storage

Every cookie and piece of browser storage Groundcuvva uses. All of them are needed for the app to work; none track you.

Updated 9 October 2026

In short

Groundcuvva uses no analytics, advertising or tracking cookies, and no third-party cookies. Everything below is strictly necessary to provide the service you asked for, so under the Privacy and Electronic Communications Regulations (PECR, reg. 6(4)) we don’t need your consent and don’t show a cookie banner. The marketing and legal pages set no cookies and store nothing in your browser; the offline storage below starts only once you sign in to the app.

Cookies

Over HTTPS the sign-in cookies are named with a __Secure- prefix. They are HttpOnly (page scripts can’t read them), Secure, SameSite=Lax, and scoped to groundcuvva.com so one sign-in covers your company’s web address.

NamePurposeLasts
better-auth.session_tokenKeeps you signed in. Holds a random session reference, not your details.Three days, renewed while you use the app (one day if “keep me signed in” is off)
better-auth.dont_rememberRemembers that you chose not to stay signed in.Until you close the browser
better-auth.two_factorCarries you from the password step to the code step of two-step sign-in.10 minutes
better-auth.trust_deviceOnly if you tick “trust this device” during two-step sign-in: skips the code on this device.Up to 30 days
better-auth.oauth_stateOnly during “Continue with Google”: protects the sign-in round trip against forgery.A few minutes
sidebar_stateRemembers whether you collapsed the app’s sidebar.Seven days

Browser storage

NamePurposeLasts
gc:sign-in-link-email (local storage)The email you asked a sign-in link for, so an expired link can offer to send a new one.Until replaced or you clear site data
groundcover-offline-mutations (local storage)Crew app: clock-ins and other actions made without signal, held until they can be sent.Until sent, usually seconds
groundcover-v2 (service worker cache)Signed-in app only: app files, so the app opens with poor or no signal.Until a new version replaces it
groundcover-schedule-v1 (service worker cache)Signed-in crew app only: your own schedule for offline viewing.Until you sign out (cleared on sign-out)

Third parties

Maps and address search load from Mapbox in your browser. Mapbox doesn’t set cookies for us, and we have turned off its optional performance reporting. Payments happen on Stripe’s own pages, which follow Stripe’s cookie policy.

Your choices

You can delete cookies and site data in your browser settings at any time; you will be signed out and offline data on that device will be lost. More about how we handle personal data: privacy notice. Questions: privacy@groundcuvva.com.