Skip to content

First build. Licensed-feed rows are sample fixtures. Stripe is in test mode. A card is not charged for real. This app stops at the signed contract.

Cookies and GDPR

Co-host uses two cookies so you can stay signed in. It does not use advertising or analytics cookies.

Last updated 28 October 2026.

The cookies

cohost_at is the access cookie. It is httpOnly, SameSite Lax, sent only to this site, and it expires after 15 minutes. On a production host it is also marked Secure.

cohost_rt is the refresh cookie. It is httpOnly, SameSite Lax, limited to /api/auth, and it lasts 7 days. Each use rotates it. Reuse of an old refresh cookie signs that session family out.

Why there is no consent banner

Both cookies are strictly necessary to provide the sign-in you asked for. European ePrivacy rules do not require a consent banner for that kind of cookie. We do not set any other cookie. If we add an optional cookie later, we will ask first and update this page.

GDPR

CoHost Software LLC is the controller. The privacy page states the purposes, the legal bases, the United States processing location, the retention period, and the rights of access, correction, deletion, restriction, portability, and objection. Read the privacy page for the request address.

You can delete the cookies in the browser. The workspace will not stay signed in without them.