Cookies
Alpha · last updated 7 November 2026
Beamling uses only the cookies needed to sign you in and protect the sign-in flow.
Essential cookies
| Cookie | Purpose | Lifetime |
|---|---|---|
__Host-beamling_session | Keeps you signed in. HttpOnly, Secure, SameSite=Lax, host-only. | 30 days without use, at most 90 days after sign-in |
__Host-beamling_oidc | Carries the encrypted OIDC state, nonce and PKCE verifier during sign-in. | 10 minutes |
Outside production the cookie names omit the __Host- prefix and may be non-Secure on localhost. Deleting cookies in your browser signs you out; the server-side session can also be revoked from Settings.
No analytics or advertising cookies
Product analytics, when enabled, runs on the server and sends metadata only. The browser loads no PostHog SDK, no advertising network and no non-essential script. There is therefore no cookie banner for optional cookies.
See the privacy policy for retention and your rights.