Cookie Policy
The short version
- Two cookies: one keeps you signed in, one remembers the organization you last opened.
- Local storage keeps preferences such as the theme; your browser's database keeps its encryption key.
- No analytics, advertising or tracking of any kind, so there's nothing to consent to.
This policy explains what PeekInside stores in your browser and why. It adds to our Privacy Policy.
Cookies
| Name | What it does | Lasts |
|---|---|---|
__Secure-better-auth.session_token | Keeps you signed in. It holds a signed token for your session and can't be read by the page's scripts. | 14 days after you last used it, or until you sign out |
peekinside_org | Remembers which organization you opened last, so the app opens it next time. | 1 year |
Both are first-party cookies, set by peekinside.dev for the site and for your organization's address on it (such as acme.peekinside.dev), so one sign-in works on both. Both are strictly necessary for the service you asked for. We use no third-party cookies.
Local storage
Your browser keeps these preferences for the app, and they never leave it:
| Key | What it remembers |
|---|---|
peekinside:theme | Dark or light theme |
peekinside:tab, peekinside:exception-tab | The tab you last opened in the request and exception details |
peekinside:inspector-width, peekinside:exception-inspector-width, peekinside:statement-width | How wide you made the detail panels |
peekinside:editor | The code editor that stack trace links open in |
Your browser's encryption key
When you link a browser to your account, it creates a key pair and keeps it in its own database (IndexedDB, under the name peekinside). The private key is made so that it can't be copied out of the browser, not even by our code; it's what lets this browser decrypt your data. It stays when you sign out, so the browser stays linked, and it's removed when you unlink the browser on the Security page.
The local dashboard
The local dashboard runs on your computer, at localhost:7335, and keeps the same preferences in that address's local storage. It loads its code from peekinside.dev without cookies.
Emails
Our emails show the PeekInside logo, which your email app loads from peekinside.dev. They contain no tracking pixels and no tracked links, so we don't know whether you opened them.
Your choices
You can see and delete cookies and site data in your browser's settings. If you block the session cookie, you can't sign in. If you delete the site's data, preferences reset, and the browser has to be linked to your account again before it can decrypt anything.