Cookie Policy
Last updated: 15 October 2026
What this page covers
This page lists the cookies and similar browser storage (localStorage, sessionStorage) that Defaults uses, what each one is for, and how long it lasts. For how we handle personal data more generally, see our Privacy Policy.
Categories
- Strictly necessary. Required for the site to work. Used to keep you signed in, to remember your cookie preferences, and to protect against fraud and abuse. These cannot be disabled.
- Functional. Remember your settings (such as theme or language) so the site behaves the way you set it.
- Analytics. Help us understand which pages are visited and where users get stuck so we can improve the product. We use PostHog, which gives your browser a random identifier (linked to your account if you sign in) and records page views, clicks and a session replay. In the replay, page text and anything you type are masked and the trait-position charts in your report are blocked; layout, clicks and which answer button is selected are still recorded. None of this is loaded until you accept analytics.
- Campaign information. A saved short-test session can include the campaign, referring website, and Google or Facebook click identifier from the link you followed. These fields help us understand where a test visit came from.
Cookies and storage entries we set
| Name | Vendor | Category | Purpose | Retention |
|---|---|---|---|---|
| door_pair_owner | Defaults (HttpOnly cookie) | Strictly necessary | When you create a private partner comparison, identifies its creating browser to prevent it from also submitting as the invited partner. Contains a random token, not answers or scores. | 30 days |
| door-pair-invite:{result-token} | Defaults (sessionStorage) | Strictly necessary | Keeps the private invitation path available on the creating tab’s waiting page. Contains no answers or scores. | Until the tab closes; removed when this tab observes completion, expiry or deletion |
| __session | Clerk | Strictly necessary | Keeps you signed in to your account | Session |
| __client_uat | Clerk | Strictly necessary | Tracks last authentication time for session refresh | 1 year |
| __clerk_db_jwt | Clerk | Strictly necessary | Issues short-lived session tokens to the app | Session |
| defaults.consent.v1 | Defaults (localStorage) | Strictly necessary | Your answer to the cookie banner, so we do not ask again | Until you clear your browser storage |
| anon-test:v1 | Defaults (localStorage) | Strictly necessary | Your answers, your optional reason for taking the test and focus area, age confirmation, and progress. When a server draft exists, this also holds its identifier and a secret token that lets this device save it. This lets you close the tab and resume. | Until the run is finished, or until you clear your browser storage |
| anon-result:v1 | Defaults (localStorage) | Strictly necessary | The identifier and completion time of your finished run, plus your optional reason for taking the test, so this device can reopen your results without an account | Until you clear your browser storage |
| assessment-session:{id} | Defaults (localStorage) | Functional | Which question you are on in a signed-in run | Until that run is finished, or until you clear your browser storage |
| assessment-progress:{id} | Defaults (localStorage) | Functional | Your answers and optional report notes, questions, priorities, and life areas, saved on this device between questions | Until that run is finished, or until you clear your browser storage |
| defaults-screener-prefill | Defaults (localStorage) | Functional | Your short-test answers, so the full test does not ask them twice. This can also include the referring website, campaign fields, and Google or Facebook click identifier from your arrival link. | 7 days, or until the full test is scored |
| defaults-domain-screener-carry:v1 | Defaults (localStorage) | Functional | Your answers to the 24 items from the one-pattern screener, so the full test does not ask you the same ones twice | 7 days, or until the full test is scored |
| defaults-screener-carry | Defaults (cookie) | Functional | Which short question page you came from, so the full test credits the right one — never your answers | 7 days, or until the full test is scored |
| ph_<project token>_posthog | PostHog (EU Cloud; cookie and localStorage) | Analytics | A random identifier for this browser, linked to your account if you sign in, used for product analytics: page views, button clicks, funnel events, feature flags, and a session replay in which page text and anything you type are masked and the trait-position charts in your report are blocked (layout, clicks and which answer button is selected are still recorded). PostHog also keeps per-tab entries in session storage: a copy of this record, plus ph_<project token>_window_id and ph_<project token>_primary_window_exists. They end when the tab closes. | 12 months. Removed from this browser when you decline or withdraw analytics. |
| defaults-bridge-continued | Defaults (localStorage) | Analytics | Up to 20 run identifiers used to avoid counting the same Continue click twice | Until replaced by newer runs or you clear browser storage |
| __ph_opt_in_out_<project token> | PostHog (localStorage) | Analytics | Set by PostHog when you accept analytics. If you later withdraw, it is changed to "no" and kept so PostHog stays off in this browser. It holds only a yes or a no. | Until you clear your browser storage |
These keys keep your answers on this device so you can close the tab and pick the test back up. Your answers to a test run are also saved to our servers as you go, so a run is not lost if this device is. The two screener keys stay on this device until the full test is scored.
Strictly necessary cookies are set when you first visit. Analytics cookies are only set if you accept them on the cookie banner. Third-party providers may set their own technical cookies on their own domains when you interact with embedded flows (for example, the Clerk sign-in widget); those are governed by the provider's own cookie notice.
How to change your consent
You can change or withdraw your consent at any time by clicking (this opens the cookie banner). Withdrawing analytics consent stops further data collection from that point on and removes PostHog's identifier from this browser; it does not remove data we already collected, though you can request deletion under our Privacy Policy. You can also delete cookies directly through your browser settings — note that this will sign you out.
Do Not Track
Browser «Do Not Track» signals are not currently a recognized industry standard, so we do not change behavior in response to them. We do honor the Global Privacy Control (GPC) signal where required by U.S. state law as an opt-out of sale or sharing — though as noted in our Privacy Policy, we do not sell or share personal information.
Contact
Cookie questions: privacy@knowthydefaults.com