Cookie Policy

This Cookie Policy explains what cookies and local storage Pattern5 uses and why.

Last updated: 2026-02-20

1. Introduction

Cookies are small text files stored on your device when you visit a website. Pattern5 uses a minimal set of cookies — all are either strictly necessary for authentication and security or functional preferences. We do not use advertising or tracking cookies.

2. Cookies We Use

Cookie NamePurposeTypeDuration
authjs.session-tokenEncrypted JWT containing your session (user ID, role). Required for authentication.Strictly Necessary7 days
authjs.csrf-tokenProtects against cross-site request forgery on authentication forms.Strictly NecessarySession
authjs.callback-urlRemembers where to redirect you after login.Strictly NecessarySession
sidebar_stateRemembers whether the navigation sidebar is expanded or collapsed.Functional7 days
Theme cookie (next-themes)Remembers your light/dark/system theme preference.Functional1 year

In production, authentication cookies use the __Secure- prefix and are set with httpOnly, Secure, and SameSite=lax flags.

3. Local Storage

We also use browser localStorage for UI preferences. This data never leaves your browser and is not transmitted to our servers.

KeyPurpose
themeTheme preference (supplements the theme cookie for server-side rendering)
ai-chat-app-preferred-modelPreferred AI model for content generation
admin-customers-view-modeAdmin dashboard display preference (admin users only)
oauth_return_urlTemporarily stores redirect URL during OAuth login (cleared after use)

4. Third-Party Services

  • Stripe: When you visit Stripe's checkout or billing portal (via redirect), Stripe may set cookies on the stripe.com domain. These are governed by Stripe's privacy policy and are not present on pattern5.com.
  • Sentry (production): The Sentry SDK may use internal browser storage for error tracking. No tracking cookies are set.

5. Managing Cookies

You can manage cookies through your browser settings. Disabling strictly necessary cookies (authentication, CSRF) will prevent you from logging in. Disabling functional cookies means your theme and sidebar preferences won't persist between visits.

No cookie consent banner is presented because all cookies are either strictly necessary for the service to function or are functional preferences — neither category requires consent under GDPR.

6. Contact Information

If you have questions about this Cookie Policy, please contact us:

NHXHN, LLC

Email: support@pattern5.com

Address: 9550 Mason Montgomery Rd #1159, Mason, OH 45040

This Cookie Policy is effective as of 2026-02-20.

If you have any questions about this document, please contact us at support@nhxhn.com