Cookie policy
Last updated 28 August 2026
The short version. GROW Moment sets four cookies. Three keep you signed in or hold an unfinished signup together; the fourth remembers that you answered the banner. There are no advertising cookies, no cross-site trackers and no third-party marketing pixels on this site.
1The cookies, all of them
| Name | What it does | Lasts | Category |
|---|---|---|---|
| __Host-session | Keeps you signed in. It is a signed session token, set by us after Firebase verifies your sign-in. Without it every page would ask you to log in again. | Until it expires or you sign out | Strictly necessary |
| __Host-regToken | Holds the id of an in-progress signup, so that closing the tab halfway through the wizard does not lose the steps you already completed. Cleared when signup finishes or is abandoned. | Until signup completes or the session expires | Strictly necessary |
| regToken | The same value as the one above, without the __Host- prefix, for browsers and contexts where the prefixed form is not accepted. It carries no additional information. | Until signup completes or the session expires | Strictly necessary |
| site_cookie_consent | Remembers that you answered the cookie banner, so it stops appearing. It records only “accepted” or “declined”. | One year | Preference |
All four are first-party — set by growmoment.app, readable only by it. The session cookies are HTTP-only, meaning scripts on the page cannot read them, and host-scoped, meaning they cannot be set for or sent to any other subdomain.
2What the banner actually does
The banner exists so you know what is being set, and so we can record that you were told. Accepting stores your answer. Declining also stores your answer — and then nothing else changes, because every remaining cookie is strictly necessary to sign you in or to complete a signup. There is nothing non-essential here to switch off.
If that changes — if we ever add analytics or anything that profiles you — the banner will gain a real choice, this page will say so before it ships, and nothing new will be set until you have agreed to it.
3Things that are not cookies but are worth knowing about
- Local storage. The app keeps a small amount of state in your browser — for example a check-in you have started typing but not confirmed — so that a refresh does not lose it. It never leaves your device until you confirm.
- Server logs. Our host records the usual request data (IP address, user agent, page, time) for security and diagnostics. That is not a cookie and cannot be turned off from here; it is covered in the privacy policy.
- Page-timing measurements. Anonymous loading and responsiveness figures are collected to find slow pages. They carry no identifier and set no cookie.
- Stripe. When you are on a Stripe checkout or billing page, Stripe sets its own cookies under its own policy — including ones it uses to detect fraud. That happens on Stripe’s page, not ours. See Stripe’s Cookie Policy.
4Getting rid of them
Every browser lets you view and delete cookies for a site, and block them for future visits. Blocking the two session cookies will stop you being able to sign in — that is not us being awkward, it is what those cookies are for.
Signing out clears the session cookie. Deleting your account removes everything on our side; see the privacy policy.
5Questions
Cookies and tracking, or anything else: info@growmoment.app.