Cookie Inventory
Every cookie AgentGrail sets, in one place. Essential cookies keep the app working and can't be disabled; Functional and Analytics cookies are optional — manage your choice from Settings > Privacy (signed in) or the cookie banner on your first visit. See also our Privacy Policy.
| Cookie | Category | Purpose | Duration |
|---|---|---|---|
| grail_user_id | Essential | Signs you in and keeps your session active. Required — the app cannot function without it. | Session / until logout |
| grail_role | Essential | Remembers your account role (member / admin) so access checks don't need a database round-trip on every request. | Session / until logout |
| grail_cookie_consent | Essential | Stores your cookie consent choice itself, so the banner doesn't reappear on every visit. | 1 year |
| grail_ebay_state | Essential | Short-lived anti-CSRF token used only while you're connecting your eBay account. | A few minutes (OAuth flow only) |
| grail_ebay_post_login_redirect | Essential | Remembers which page to return you to after completing eBay account connection. | A few minutes (OAuth flow only) |
| grail_ebay_access / grail_ebay_refresh / grail_ebay_expires | Functional | Your eBay OAuth tokens, only set if you choose to connect an eBay account (watchlist sync, listing data). | Until token expiry or you disconnect eBay |
| ph_* (PostHog) | Analytics | Anonymized product analytics — which features are used, error tracking. Only set after you accept analytics in the cookie banner or Settings > Privacy. | Up to 1 year (PostHog default) |
| __cf_bm / cf_clearance | Essential | Cloudflare's bot-management and security cookies, set at the network edge to protect the site from automated abuse. Not set by our application code. | Session to 30 minutes (Cloudflare default) |
Questions about this list? Contact [email protected].