Cookie & browser storage notice
Last updated 30 September 2026.
Current cookie use
Panther Hook currently uses only cookies required for authentication and request security. The current production frontend does not include optional advertising, behavioral tracking, or analytics cookies, so Panther Hook does not present a consent banner for categories that are not in use.
Session cookie
In production, __Host-form_session keeps an authenticated browser session. It is Secure, SameSite=Lax, scoped to the site root, and HttpOnly so frontend JavaScript cannot read it. A newly issued session expires after seven days unless it is revoked or cleared sooner.
CSRF cookie
In production, __Host-form_csrf supports cross-site request forgery protection for state-changing requests. It is Secure, SameSite=Lax, scoped to the site root, and readable by the frontend so the same token can be sent in theX-CSRF-Token request header. It follows the same seven-day session expiry when issued.
Local browser storage
The dashboard uses localStorage for the selected workspace, theme preference, and sidebar collapsed/expanded preference. These values support product state and presentation; they are not used for advertising or cross-site tracking. A legacy access-token key may exist in older browsers, but the current session-based application clears that key instead of using it for authentication. The Panther Hook frontend does not currently use sessionStorage for its own application state.
OAuth and billing
Google and GitHub sign-in return to the same Panther Hook session model described above. Billing opens Stripe-hosted Checkout or the Stripe Customer Portal in the browser rather than embedding Stripe.js in the current Panther Hook frontend. Stripe may use cookies on its own hosted pages under its own policies.
Changes
If Panther Hook later adds optional analytics, advertising, or other non-essential browser tracking, this notice and any consent controls will be reviewed before that tracking is enabled.
Contact
Questions about cookies or browser storage can be sent to support@pantherhook.com.