This Cookie Policy explains how GuestsBoard uses cookies and similar technologies when you visit guestsboard.com or use the host dashboard at app.guestsboard.com.
Cookies are small text files stored on your device by your browser when you visit a website. They are widely used to make websites work efficiently and to provide information to website owners.
GuestsBoard uses a minimal set of cookies. We do not use advertising cookies or third-party tracking cookies.
| Cookie | Type | Purpose | Duration |
|---|---|---|---|
| better-auth.session_token | Essential | Keeps you logged in to the dashboard. This is an httpOnly, Secure, SameSite=Lax cookie — it cannot be accessed by JavaScript and is never sent on cross-site requests. | 7 days (rolling) |
| better-auth.csrf_token | Essential | Protects against cross-site request forgery (CSRF) attacks on the dashboard. | Session |
| gb_onboarding | Functional | Stored in localStorage (not a cookie) — tracks whether you've completed the onboarding tour so we don't show it again. | Permanent (until cleared) |
GuestsBoard does not use:
The session and CSRF cookies are strictly necessary for the dashboard to function — without them, you cannot log in or use any authenticated features. Because they are essential, they do not require your consent under most privacy regulations (GDPR, CCPA, ePrivacy).
If you prefer not to use GuestsBoard with cookies, you can delete these cookies in your browser settings at any time. Doing so will log you out of the dashboard.
The marketing site at guestsboard.com does not set any cookies. It is a static page served over Cloudflare's CDN. Cloudflare may set a __cf_bm cookie for bot management — this is a Cloudflare-managed cookie used to distinguish bots from humans and expires after 30 minutes.
You can control or delete cookies through your browser settings:
Note: deleting the session cookie will log you out of the GuestsBoard dashboard.
We may update this Cookie Policy from time to time. Material changes will be communicated via the email address associated with your account at least 14 days before they take effect.
Questions about our use of cookies? Email [email protected].