Skip to content

Cookie policy

Last updated: August 2026

This policy describes the cookies and similar technologies used on React Box, their purpose, retention period, and how you can manage your consent.

What is a cookie?

A cookie is a small text file placed on your device by your browser when visiting a website. It allows the site to recognise your device on subsequent visits, remember your preferences or measure audience.

Cookie categories used

Essential cookies

Required for the service to operate. They cannot be disabled. Includes the authentication session cookie (better-auth.session_token), the session cache cookie that avoids a database read on every request (better-auth.session_data), the language cookie (RB_LOCALE) and the cookie storing your consent preferences (rb-consent). In production, both authentication cookies are prefixed __Secure- and set as HttpOnly, SameSite=Lax.

Audience measurement cookies

We use PostHog to measure audience and understand how the service is used. The corresponding cookie is only set after your explicit consent: it holds a visitor identifier and the state of your consent, and it is served first-party from our own domain. Measurement records the pages you visit, your interactions with the interface, errors and — on signed-in surfaces only (dashboard, account, administration, authentication) — a recording of your browsing session used for diagnostics. Input fields are masked in those recordings. You can refuse or withdraw this consent at any time via the "Cookie preferences" link: capture stops and the visitor identifier is reset.

NamePurposeDurationProvider
better-auth.session_tokenAuthentication session60 rolling daysReact Box
better-auth.session_dataSession cache, to avoid a database read on every request30 secondsReact Box
RB_LOCALELanguage preference1 yearReact Box
rb-consentCookie consent preferences13 monthsReact Box
ph_…_posthogAudience measurement and session recording, after consent12 monthsPostHog

Manage your preferences

You can adjust your consent at any time by clicking the "Cookie preferences" link in the footer of every page on the site. Withdrawing consent does not affect the lawfulness of prior processing.