Last updated: September 2026
Cookie policy
This policy describes the cookies and similar technologies used on React Box, their purpose, retention period, and how you can manage your consent.
What is a cookie?
A cookie is a small text file placed on your device by your browser when visiting a website. It allows the site to recognise your device on subsequent visits, remember your preferences or measure audience.
Cookie categories used
Essential cookies
Required for the service to operate. They cannot be disabled. Includes the authentication session cookie (better-auth.session_token), the session cache cookie that avoids a database read on every request (better-auth.session_data), the language cookie (RB_LOCALE) the cookie storing your consent preferences (rb-consent) and, in the dashboard, the cookie storing whether the sidebar is open or collapsed (sidebar_state). In production, both authentication cookies are prefixed __Secure- and set as HttpOnly, SameSite=Lax.
Audience measurement cookies
We use PostHog to measure audience and understand how the service is used. Until you make a choice, or if you decline, only a visit count without any cookie or storage on your device is performed: it relies on a hash computed server-side, rotated daily and impossible to link back to a person. The cookie is only set after your explicit consent: it holds a visitor identifier and the state of your consent, and it is served first-party from our own domain. Measurement then records the pages you visit, your interactions with the interface, errors and — on signed-in surfaces only (dashboard, account, administration, authentication) — a recording of your browsing session used for diagnostics. Input fields are masked in those recordings. You can refuse or withdraw this consent at any time via the "Cookie preferences" link: the cookie is removed, the visitor identifier is reset and only the cookieless visit count remains.
| Name | Purpose | Duration | Provider |
|---|---|---|---|
| better-auth.session_token | Authentication session | 60 rolling days | React Box |
| better-auth.session_data | Session cache, to avoid a database read on every request | 30 seconds | React Box |
| RB_LOCALE | Language preference | 1 year | React Box |
| rb-consent | Cookie consent preferences | 13 months | React Box |
| sidebar_state | Remembers the dashboard sidebar state | 7 days | React Box |
| ph_…_posthog | Audience measurement and session recording, after consent | 12 months | PostHog |
Manage your preferences
You can adjust your consent at any time by clicking the "Cookie preferences" link in the footer of every page on the site. Withdrawing consent does not affect the lawfulness of prior processing.