What Watchlist stores
On secure connections, the cookie names start with __Secure-. All cookies are first-party, HTTP-only where possible, and never shared with anyone.
| Name | Type | Why | How long |
|---|---|---|---|
| better-auth.session_token | Cookie | Keeps you signed in. Only set when you sign in. | 7 days, renewed while you use the app |
| better-auth.session_data | Cookie | A signed copy of your session, so pages load without a database lookup. | 5 minutes |
| Sign-in state | Cookie | Protects the Google sign-in round trip against forgery. Only during sign-in. | A few minutes |
| watchlist:guest | Local storage | Your watchlist while signed out. Moves to your account when you sign in. | Until you sign in or clear it |
| Offline caches | Cache storage | Pages, posters and data you've viewed, so the app opens and works offline. | Until replaced by newer copies, or you clear it |
Why there's no consent banner
EU rules let a site store things on your device without asking when they're strictly necessary for a service you requested. Everything above is. If Watchlist ever adds analytics or other optional storage, it will ask you first.
Third-party content
- Trailers come from YouTube in its privacy-enhanced mode, and only load after you press play. Once playing, YouTube (Google) may set its own cookies or storage, under Google's cookie policy.
- Posters and images load from TMDB's image servers. They don't set cookies, but TMDB sees your IP address, as with any image on the web.
- Profile pictures from Google sign-in load from Google's servers.
Removing it
Signing out deletes the sign-in cookies. To remove everything else, clear this site's data in your browser's settings, or uninstall the app if you installed it. Clearing it while signed out deletes your device watchlist for good, so sign in first if you want to keep it.
More about how your data is used is in the privacy policy.