A cookie is a small file a site stores in your browser. Leaf only uses strictly necessary cookies: to keep you signed in and to secure a sign-in in progress. No analytics, advertising or social media cookies. That is why no banner asks for your consent: the law does not require it for these cookies.
On getleaf.dev
This site sets no cookies. It loads no third-party scripts or fonts: the typefaces are served by getleaf.dev itself.
Cloudflare, which protects our addresses, may set a security cookie (such as __cf_bm) when it needs to tell a person from a bot. This cookie does not track you and expires after 30 minutes.
On the dashboard (app.getleaf.dev)
| Cookie | Why | Lifetime |
|---|---|---|
__Secure-better-auth.session_token |
Keeps you signed in to your account | 7 days, extended while you use Leaf |
__Secure-better-auth.state |
Secures a sign-in with Google in progress | A few minutes |
leaf_oauth_org |
Remembers the organisation you picked while connecting your AI | 10 minutes |
The dashboard also keeps two preferences in your browser’s storage, which never leave your device: the language you chose, and the project folders you opened.
On the sites Leaf hosts
Sites served on leafpages.dev or on a customer’s domain belong to our customers. Cookies set by a site’s code are its publisher’s responsibility, who must tell you about them and, where needed, ask for your consent.
To protect each site from the others, Leaf removes any cookie a site tries to set for the whole of leafpages.dev: a site’s cookie only counts for that site’s address.
When a site offers accounts, the sign-in page is served by Leaf on the site’s address and sets these cookies, limited to that address:
| Cookie | Why | Lifetime |
|---|---|---|
__Host-leaf_session |
Keeps you signed in to the site | 10 minutes, renewed automatically |
__Host-leaf_refresh |
Renews the sign-in without asking for your password again | 30 days |
__Host-leaf_pool_… |
Offers to sign you back in with one click | 30 days |
The visit statistics Leaf gives sites use no cookies.
Managing cookies
Your browser lets you see, delete or block cookies. If you block the cookies described here, you will no longer be able to sign in to the dashboard or to sites that ask for an account.