Legal
Cookie Policy
Last updated: October 29, 2026
This policy explains which cookies and similar technologies (such as local storage) the NotificationStream website and dashboard use. They are operated by RCHITECTED QUBILA SRL, trading as NotificationStream, a limited liability company registered in Romania with the Trade Register under no. J12/4516/2022, sole registration code (CUI) 46532650, VAT no. RO46532650, with its registered office in Cluj-Napoca, Cluj County, Romania.
In short: we only store what is needed to sign you in, keep the Service secure and remember the display choices you make. We do not use analytics, advertising or cross-site tracking cookies. EU and Romanian law (Article 5(3) of the ePrivacy Directive and Article 4(5) of Law no. 506/2004) does not require consent for this kind of storage, so we do not show a cookie banner. If we ever add cookies that need your consent, we will ask for it first.
Cookies and storage we use
| Name | Type | Purpose | Duration |
|---|---|---|---|
better-auth.session_token (prefixed with __Secure- on HTTPS) | First-party cookie, strictly necessary | Keeps you logged in to the dashboard. | 7 days, renewed while you use the dashboard |
better-auth.session_data | First-party cookie, strictly necessary | A signed, short-lived copy of your session that makes the dashboard faster. | 5 minutes |
better-auth.state | First-party cookie, strictly necessary | Protects login with GitHub or Google against forged requests. Only set while you log in with one of them. | 5 minutes |
sidebar_state | First-party cookie, functional | Remembers whether you collapsed the dashboard sidebar. Set when you toggle it. | 7 days |
theme | Local storage, functional | Remembers whether you chose the light, dark or system theme. | Until you clear it |
Security cookies from Cloudflare
Our website runs on Cloudflare. To protect it against bots and attacks, Cloudflare may set strictly necessary security cookies such as __cf_bm or cf_clearance, for example when it needs to check that a visitor is not automated. The log in, registration and password reset forms also run Cloudflare Turnstile, which checks your browser for signs of automation. See Cloudflare's cookie policy and the Turnstile privacy addendum.
Checkout
When you start a subscription or buy a request pack, the checkout is provided by Stripe (through its Link merchant of record service), our reseller and merchant of record. The dashboard's checkout page (/billing/checkout) embeds Stripe Checkout, and Stripe.js is only loaded on that page. Stripe.js sets Stripe cookies such as __stripe_mid and __stripe_sid, which are strictly necessary for fraud prevention. See Stripe's cookie policy and Stripe's privacy policy.
Our SDKs in your app
The NotificationStream SDKs do not set cookies. In web apps the JavaScript SDK stores a session token and the most recent notifications of the signed-in end user in local storage, under a key starting with notificationstream:, so the feed shows right away on the next visit. In React Native apps, this only happens if the app provides a storage adapter. Developers can turn this caching off. Developers who use our SDKs are responsible for informing their own end users about this storage.
Managing cookies
You can view and delete cookies and local storage in your browser settings at any time. Blocking the session cookies will prevent you from logging in to the dashboard.
More information
For how we handle personal data, see our Privacy Policy. Questions? Email support@notificationstream.com.