Cookie Policy
Last updated October 1, 2026
In short
- Only strictly necessary cookies are set by default: they keep you signed in.
- Google Analytics and ad measurement load only if you click Accept. Global Privacy Control counts as a no.
- No cookies or trackers in the desktop app or command line.
1.What cookies are
Cookies are small files a website stores in your browser. Similar technologies, such as local storage, work the same way. Some are strictly necessary for a site to work; others, like analytics, are optional and, in the EU, UK and many other places, need your consent before they're set. This policy covers macaron.sh and the Macaron web app. Our desktop app and command line don't use cookies or trackers.
2.Your choice
The first time you visit, we ask whether you accept analytics and ad measurement cookies. Nothing optional loads unless you click Accept. If you reject, or don't answer, we don't load Google's tags or PostHog at all. If your browser sends a Global Privacy Control signal, we treat it as a rejection and don't ask.
You can change your mind at any time: .
3.Strictly necessary
These are always on, because the site and app can't work without them. They don't track you across sites.
| Name | Purpose | Duration |
|---|---|---|
__Host-bower_session | Keeps you signed in to the web app; secure, http-only, same-site | Up to 30 days |
__Host-bower_device | Holds a GitHub sign-in while it finishes | Up to 15 minutes |
__Host-macaron_google_flow | Protects a Google sign-in against forgery while it finishes | 10 minutes |
macaron-consent (local storage) | Remembers whether you accepted or rejected optional cookies | Until you clear it |
| App preferences (local storage) | Remembers layout choices in the web app, such as panel sizes | Until you clear them |
4.Analytics and ad measurement (only if you accept)
| Name | Provider | Purpose | Duration |
|---|---|---|---|
ph_* (local storage) | PostHog | Counts visits, pageviews and download/sign-in clicks; session recording is disabled | Until you withdraw consent or clear site storage |
_ga | Google Analytics | Distinguishes visitors to count visits and pages | 2 years |
_ga_* | Google Analytics | Keeps the state of a visit | 2 years |
_gcl_au | Google Ads | Measures whether ads led to visits or sign-ups | 90 days |
Google processes this data as described in its privacy policy. We don't use these cookies for personalized advertising, and ad personalization stays turned off even when you accept.
5.Controlling cookies in your browser
You can also block or delete cookies in your browser settings. Blocking strictly necessary cookies will stop you signing in. Google offers a browser add-on to opt out of Google Analytics on all sites.
6.Laws this policy follows
We ask for consent before optional cookies in line with the EU ePrivacy Directive and GDPR, the UK Privacy and Electronic Communications Regulations and UK GDPR, and Swiss law, and we honour opt-outs and Global Privacy Control under the CCPA and other U.S. state privacy laws. More detail is in the Privacy Policy.
7.Contact
Questions about cookies: [email protected].
Macaron, Florida, United States. Questions about this document: [email protected]