This page lists every cookie Nepteo sets, one by one, and the browser storage it uses, by family with the main names. Cookies are checked against our code by an automated test. Browser storage is not listed name by name: the interface keeps many small display settings that are not all named here.
1. What we use them for
Strictly necessary entries keep you signed in, remember your language and your interface settings, and carry out the connection or payment you ask for. They need no consent. The only optional tracker is PostHog product analytics (EU servers), in your browser and from our servers: it starts only if you click Accept, and it never starts before you choose. We use no advertising tracker.
2. Strictly necessary
These entries are needed to deliver the service you asked for. They are set without consent for that reason.
| Name | Type | Issued by | Purpose | Duration |
|---|---|---|---|---|
| sb-<project>-auth-token | Cookie | Nepteo | Keeps you signed in. Set by our authentication library (Supabase). | 400 days |
| sx_onboarding_done | Cookie | Nepteo | Remembers that you finished sign-up setup. | 1 year |
| sx_setup_done | Cookie | Nepteo | Remembers that you finished sign-up setup. | 1 year |
| NEXT_LOCALE | Cookie | Nepteo | Remembers your language. | 1 year |
| oauth_pkce_verifier | Cookie | Nepteo | Protects the connection of an outside account while you sign in to it. Set only when you start that connection. | 5 minutes |
| oauth_state_gmail | Cookie | Nepteo | Protects the connection of your Gmail account. Set only when you start that connection. | 10 minutes |
| oauth_state_outlook | Cookie | Nepteo | Protects the connection of an Outlook account. Set only when you start that connection. | 10 minutes |
| vault_session | Cookie | Nepteo | Keeps the Vault open for a few minutes after you unlock it. Set only when you unlock it. | 5 minutes |
| nepteo:cookie-consent | Browser storage | Nepteo | Remembers your cookie choice. | 6 months |
| steerx_tz_synced, nepteo:explicit_logout, nepteo:intro_played, nep_paywall_dismissed, vault_unlocked_at, elper_last_visited_page, elper_session_state_v1, sx_new_contact_draft | Browser storage | Nepteo | Short-lived state kept while a tab is open: the page you were on, unsent chat drafts, the unlocked state of the Vault, that you signed out on purpose, and a few one-time notices (intro played, paywall dismissed, time zone synced). | Until you close the tab |
| sidebar_collapsed, sidebar_messaging_expanded, elper_sidebar_collapsed, messaging_sidebar_open, vault_sidebar_open, docs_sidebar_open, billing_sidebar_open, agenda-sidebar, clients-sidebar, routines_sidebar_open, settings_sidebar_open, templates_sidebar_open, vault_view_mode, routines_view_mode, templates_view, steerx_docs_view, nepteo.ui.email_zoom, nepteo.ui.messaging_list_collapsed | Browser storage | Nepteo | Display preferences: open or collapsed side panels, view modes, zoom. Stored only in your browser. Many such settings exist; this is the list of the main names, not every one. | Until you clear your browser data |
| elper_first_greeting_done_v2, sx_welcome_popup_seen, sx_onboarding_chat_done, nepteo:onboarding-step, steerx-dashboard-tour-completed, steerx_editor_tour_done, steerx_editor_onboarded, nepteo:memory_intro_dismissed | Browser storage | Nepteo | Remember which welcome messages, tours and intro screens you already saw, and which setup step you are on. | Until you clear your browser data |
| userName, userLastName, userNickname, userEmail, userPhone, userAddress, userCompany, userCompanyEmail, userCompanyPhone, userCompanyAddress, userCompanyVat | Browser storage | Nepteo | The profile and company details you enter (name, email, phone, address, company, VAT number), kept in your browser to pre-fill forms. Anyone who uses this browser can read them: clear your browser data on a shared computer. | Until you clear your browser data |
| elper_chats_v1, elper_active_chat_v1, elper_chat_drafts_v1, elper_prefs_v1, elper_memory_v1, elper_structured_memory_v1, elper_reminders_v1, billingInvoices, billingCompanyInfo, billingFiles, billingFolders, dashboardState, dashboard_widget_order, steerx:contacts, steerx:recentDocs, sx_meetings_v1, sx_notifications | Browser storage | Nepteo | Local copies of working data kept in your browser: assistant chats and preferences, reminders, billing drafts and company details, dashboard layout, contacts, recent documents and meetings. Main names only. | Until you clear your browser data |
| __ph_opt_in_out_<project key> | Browser storage | PostHog (EU) | Written when you withdraw your analytics consent while the page is open, so that PostHog stays off until the page is reloaded. It is removed at the next page load. | Until the next page load |
3. Optional (with your consent)
This entry is set only after you click Accept. If you refuse, it is not set, and anything a previous version left in your browser is removed. The same choice decides whether our servers send PostHog events for your account.
| Name | Type | Issued by | Purpose | Duration |
|---|---|---|---|---|
| ph_<project key>_posthog | Cookie and browser storage | PostHog (EU) | PostHog product analytics: a random identifier stored in your browser (not linked to your account). On-screen text is masked, there is no session recording. | 1 year |
| ph_<project key>_posthog, ph_<project key>_window_id, ph_<project key>_primary_window_exists | Browser storage | PostHog (EU) | PostHog product analytics, in the tab only: the session and window identifiers of the analytics library. They exist only if you accepted, and disappear when you close the tab. | Until you close the tab |
4. Set by other services
Some services act outside the cookies we set:
- Stripe: card payments are completed on Stripe's own pages. Stripe sets its own cookies there, under its own policy. We set none for it.
- Google Fonts: your browser loads our fonts from Google's servers, so your IP address reaches Google. This is not a cookie, and it happens before you choose.
- Sentry (error monitoring): no cookie.
5. Your choice
Refusing is as easy as accepting: same size, same colour, one click. Your choice is kept for 6 months in this browser, then we ask again. You can change it at any time.