Cookie Policy

Last update: February 23, 2026

1. Summary

At TriBathon we use essential cookies for core functionality and, with your consent, analytics, experience and marketing cookies to improve the platform.

2. Categories

  • Essential: required for authentication, security and core features.
  • Analytics: aggregated usage measurement with Google Analytics 4.
  • Experience: heatmaps and sessions with Hotjar.
  • Marketing: ads and attribution (Google AdSense).

3. Vendors

  • Google Analytics 4 (analytics)
  • Hotjar (experience)
  • Google AdSense (marketing)

They only run after you grant consent for each category.

4. How to manage cookies

You can open the preferences panel from the "Cookie settings" link in the footer. If you revoke consent we try to remove known cookies (best effort). Consent is renewed every 12 months.

If your browser sends Global Privacy Control (GPC), we default to essential-only.

The access token is short-lived and is renewed using a longer-lived refresh token to avoid interruptions.

5. Support

If you have questions about cookies or preferences, contact us at:

6. Essential cookies and local storage

These entries are required for authentication and core functionality. Durations reflect current backend defaults or typical provider values (may vary).

NameTypeDurationProviderPurpose
accessTokenHttpOnly cookie (1st party)Default ~1 hour (auto-renewed)TriBathonAuthenticated session
refreshTokenHttpOnly cookie (1st party)Default ~60 days (configurable)TriBathonRefresh session
csrfTokenCookie (1st party)Same as access tokenTriBathonCSRF protection
auth_tokenlocalStoragePersistent until cleared (expires ~1h)TriBathonDashboard API token
refresh_tokenlocalStoragePersistent until cleared (expires ~60d)TriBathonAuto-refresh session
refreshTokenlocalStoragePersistent until clearedTriBathonGoogle OAuth refresh (if applicable)
i18nextLnglocalStoragePersistent until clearedTriBathonSelected language
tribathon-themelocalStoragePersistent until clearedTriBathonUI theme preference
tb_first_timer_started_atlocalStoragePersistent until clearedTriBathonFirst activation milestone
tb_activation_completed_atlocalStoragePersistent until clearedTriBathonActivation completed
twitch_reauth_dismissedlocalStoragePersistent until clearedTriBathonReauth banner dismissal
tribathon_consentlocalStorageUp to 12 months or until clearedTriBathonCookie preferences

7. Optional cookies (consent required)

These cookies are only enabled if you accept the corresponding category. Durations are typical provider values and may vary.

CookieCategoryTypical durationProviderType
_ga, _ga_*Analytics2 yearsGoogle Analytics 41st party
_gidAnalytics24 hoursGoogle Analytics 41st party
_gat, _gat_gtag_*Analytics1 minuteGoogle Analytics 41st party
_hjSessionUser_*Experience1 yearHotjar1st party
_hjSession_*Experience30 minutesHotjar1st party
_hjAbsoluteSessionInProgressExperience30 minutesHotjar1st party
_gcl_au, _gads, __gads, IDEMarketing3 to 13 months (provider-specific)Google AdSense3rd party