Cookie Policy
Last Updated: October 16, 2026
1. What this covers
This page lists every cookie and similar browser-storage item (localStorage and sessionStorage) that Streamster (streamster.shop), operated by Streamster Shop, uses, who sets it, why, and how long it lasts. It is part of our Privacy Policy.
2. Your choice
When you first visit we ask whether you allow analytics. Nothing in the analytics category loads until you say yes; "Reject non-essential" and not answering have the same effect. You can change your mind at any time:
Withdrawing consent stops PostHog immediately and stops Google Analytics on your next page load. You can also delete cookies through your browser settings; deleting essential cookies will sign you out.
3. Essential (always on)
Required for the site to work: signing in, buying, security and remembering your cookie choice. These cannot be switched off.
| Name | Set by | Purpose | Lifetime |
|---|---|---|---|
| sb-<project>-auth-token (may be split into numbered parts) | Supabase Auth | Keeps a seller signed in to the dashboard. | Session; refreshed while you use the site |
| buyer_session | Streamster | Signed token that lets a buyer see and cancel their orders after clicking a sign-in link (buyers have no accounts). | 24 hours; HttpOnly, Secure |
| admin_session, admin_mode | Streamster | Signed token for Streamster staff support access. | Up to 24 hours; HttpOnly |
| facebook_oauth_state, instagram_oauth_state, shippo_oauth_state, shopify_oauth_state, shopify_shop, linkedin_oauth_state, twitter_oauth_state, twitter_code_verifier | Streamster | One-time anti-forgery values while you connect a third-party account. | 10 minutes |
| __stripe_mid, __stripe_sid (on Stripe's checkout pages) | Stripe | Fraud prevention and checkout session on Stripe-hosted pages. | Set by Stripe; see stripe.com/privacy |
| streamster_consent (localStorage) | Streamster | Remembers your cookie choice so we do not ask again. | Until you clear it or change your choice |
4. Functional (first-party, no personal data)
Remember which dashboard tips and panels you have dismissed. They identify a browser, not a person, and are never shared.
| Name | Set by | Purpose | Lifetime |
|---|---|---|---|
| streamster_pathbar_dismissed, streamster_first_sale_dismissed, streamster_arrival_dismissed, streamster_camera_ack, streamster-onboarding, hiw-seen-*, streamster_beta_survey_*, streamster_dash_visits, streamster_first_stream_ended, social-post-history (localStorage) | Streamster | Remembers dashboard tips, checklists and panels you have dismissed. Contains no personal data. | Until cleared |
| ga_purchase_sent:<id> (sessionStorage) | Streamster | Prevents a purchase being reported twice to analytics if you reload the confirmation page. Only written when analytics is allowed. | Browser tab |
5. Analytics (only with your consent)
Help us understand which pages work and where things break. Under the California Privacy Rights Act, sending analytics data to Google or PostHog may count as "sharing"; rejecting this category is how you opt out, and you can also use the Do Not Sell or Share form.
| Name | Set by | Purpose | Lifetime |
|---|---|---|---|
| ph_<key>_posthog (cookie + localStorage) | PostHog | Product analytics and session replay (how pages are used, where errors happen). Inputs are masked in replays. | Up to 1 year |
| _ga, _ga_<id> | Google Analytics 4 | Aggregate traffic and conversion measurement. IP addresses are anonymised. | Up to 2 years |
| Sentry session replay (no cookie; in-memory) | Sentry | Records the page state around an error so we can fix it. Only runs after an error and only with your consent. Error reports themselves (stack traces, no recording) are always sent. | Not stored in your browser |
| stm_session_id (sessionStorage) | Streamster | Random per-tab id for our own first-party page-view counts (stored with an anonymised IP). | Browser tab |
6. Things we do not use
No advertising or retargeting pixels, no cross-site tracking cookies, no social-media widgets that set cookies. Live video is delivered by Mux without cookies. Embedded Facebook or Instagram content is not loaded on our pages.
7. Contact
Questions about cookies: support@streamster.shop.