Skip to main content
ER ExaRoutes
Sign in Get started

Cookies Policy

Placeholder. Full legal review pending before public launch. The list of cookies below is current.

ExaRoutes uses cookies for authentication, preferences, and analytics. Below is the current list of cookies the site sets. The production version of this policy will be reviewed by counsel before public launch.

Strictly necessary

  • er-jwt / er-rt: httpOnly authentication cookies (access + refresh). Cleared on logout.
  • eradmjwt: admin-panel httpOnly authentication cookie (admin app only).
  • er-mfa: short-lived MFA challenge cookie used during sign-in.

Analytics

  • __cf_bm: Cloudflare bot-management. Expires after 30 minutes.
  • ph_*: PostHog product analytics. Anonymous unless you sign in.

Functional

  • er.intendedPlan: sessionStorage entry, NOT a cookie. Carries the plan you clicked from the marketing pricing page through to the in-app billing tab. Cleared on consume or logout.

You can clear cookies via your browser settings. Doing so will sign you out and may reset analytics opt-outs.