Cookies

Last updated 15 October 2026. This page describes how SourceLab behaves today. It is not legal advice, and a lawyer has not reviewed it. Text in brackets is unpublished information.

Your choice

Necessary storage stays on. Analytics stays off until you allow it. There is no marketing category. The choice is saved in this browser until you change it. It does not expire on a timer.

Necessary

  • Better Auth session cookies. httpOnly, SameSite=Lax, and Secure in production. They keep you signed in. Rejecting Analytics does not sign you out.
  • sidebar_state cookie, for seven days, remembers whether the notebook sidebar is open.
  • theme in local storage remembers light, dark, or system.
  • sourcelab-chat-preferences in local storage remembers the chat model and web-search toggle for each notebook.
  • sourcelab-ui in local storage remembers whether the sources panel is open.
  • sourcelab-consent in local storage remembers the Analytics choice.

Analytics

If this deployment sets a Google Tag Manager container id, the container script is added only after Analytics is granted. Before that, the page records a denied consent default and does not insert the Tag Manager script. A noscript Tag Manager frame is not used. Advertising signals stay denied even when Analytics is allowed.

Changing the choice sends a consent update. Granting Analytics can load Tag Manager on that page. Withdrawing it denies analytics storage. The script already on the page is not removed until the next load, which will not insert it again while Analytics is denied. Tags inside the container still have to be set to require analytics storage. This application cannot do that from the Tag Manager dashboard.