Cookie Policy
2. Cookies We Use
| Cookie name | Purpose | Type |
|---|---|---|
| next-auth.session-token | Authentication — keeps you logged in. HttpOnly, Secure, SameSite=Lax. | Session / Persistent |
| next-auth.csrf-token | CSRF protection — prevents cross-site request forgery on form submissions. | Session |
| next-auth.callback-url | Remembers where to redirect you after login. | Session |
LocalStorage (not cookies)
In addition to cookies, Lattice uses your browser's localStorage to store your light/dark mode preference. This data stays entirely on your device and is never transmitted to our servers. It contains no personal information.
3. Duration
- Session cookies (next-auth.csrf-token, callback-url) — deleted when you close your browser.
- Authentication cookie (next-auth.session-token) — persists for 7 days, then expires. Signing out deletes it immediately.
- LocalStorage — persists until you clear your browser's local storage or explicitly change your theme preference.
4. Third-Party Cookies
Lattice does not use third-party advertising cookies, social media tracking pixels, or cross-site analytics cookies.
Our payment processor Stripe may set cookies when you visit our billing pages. These are governed by Stripe's Privacy Policy and are used to detect fraud and secure your payment session.
5. Managing Cookies
You can control and delete cookies through your browser settings:
- Chrome — Settings > Privacy and Security > Cookies and other site data
- Firefox — Settings > Privacy & Security > Cookies and Site Data
- Safari — Preferences > Privacy > Manage Website Data
- Edge — Settings > Cookies and Site Permissions
Note: Deleting the Lattice session cookie will sign you out. Because we only use essential cookies, there is no way to use Lattice while blocking all cookies — the authentication cookie is required for the platform to function.
6. Contact
Questions about our cookie practices? privacy@joinlattice.app