Cookies and local storage
Last updated: 21 October 2026
SubSaver uses cookies that are strictly necessary to sign you in, keep sign-in secure and remember your choices. These don't need your consent. With your consent only, we also use Google Analytics to count visits and see which pages help people sign up. We use no advertising or retargeting cookies. You choose in the cookie banner, and you can change your choice at any time with .
Strictly necessary cookies
All are first-party and can't be read by other websites.
| Name | Purpose | Duration |
|---|---|---|
authjs.session-token | Keeps you signed in. Holds a random ID; your session is stored on our server. | Up to 30 days after your last visit; removed when you sign out |
authjs.csrf-token | Protects the sign-in forms against forged requests | Until you close your browser |
authjs.callback-url | Remembers which page to return to after signing in | Until you close your browser |
authjs.state, authjs.pkce.code_verifier, authjs.nonce | Secure the hand-off when you sign in with Google or Microsoft, or connect an inbox | 15 minutes |
subsaver.native-sign-in | Ties a sign-in in your browser to the SubSaver phone app that started it | 15 minutes |
NEXT_LOCALE | Remembers the language you picked (only set when you choose one) | 1 year, or until you switch back to automatic in Settings |
subsaver_consent | Remembers whether you accepted or rejected analytics cookies, so we don't ask again on every page | 1 year, or until you change your choice |
subsaver.ref | Only set when you click to accept a friend's invite: holds their invite code so your new account gets the free month you accepted. Visiting an invite link alone sets nothing. | 30 days, or until you sign up |
Analytics cookies (only with your consent)
If you click “Accept analytics”, we load Google Analytics (property G-8EEW4FD75M), provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. It tells us how many people visit, which pages they view and where they came from, so we can improve the site. It doesn't see your subscriptions, your emails or anything in your SubSaver account. Advertising features, ads personalisation and Google Signals are off. If you reject or don't choose, Google Analytics isn't loaded at all and these cookies are never set. The phone apps never load it.
| Name | Purpose | Duration |
|---|---|---|
_ga | Google Analytics: tells visits from the same browser apart (a random ID) | 2 years |
_ga_8EEW4FD75M | Google Analytics: keeps the current visit together | 2 years |
Google may process this data in the United States. Google LLC is certified under the EU-U.S. Data Privacy Framework. Read more in our privacy policy and in Google's privacy policy. Withdrawing consent stops Google Analytics on your next page and deletes its cookies from your browser.
Local storage
Your browser or the phone app also keeps a few values on your device. They stay on your device and are only sent to us when a feature needs them.
| Name | Purpose | Duration |
|---|---|---|
theme | Your light or dark preference (only set if it differs from your device's setting) | Until you change it back or clear your browser data |
subsaver.native.pushToken | Phone apps only: this device's push token, so you can turn notifications off again | Until you turn push off |
subsaver.native.verifier | Phone apps only: a one-time secret that secures signing in through the browser | Removed as soon as sign-in finishes |
If you turn on browser notifications, your browser also stores the push registration it created for SubSaver. You can remove it by turning push off in Settings or in your browser.
Things we don't use
- No advertising, retargeting or social media pixels.
- No analytics without your consent. Vercel Speed Insights measures page speed without cookies and without identifying you; see our privacy policy.
- Fonts are served from our own server, and service logos are fetched by our server, so your browser doesn't contact font or logo providers.
Your choices
Change your analytics choice at any time with (also in the footer of every page). You can also block or delete cookies in your browser settings. If you block the strictly necessary cookies, you won't be able to sign in.
More about how we handle your data: privacy policy.