Cookie Notice

Last updated September 25, 2026

First Light uses as few cookies as possible, and only ones the Service needs to work. We use no analytics, advertising or tracking cookies, so there is no cookie banner and nothing to opt out of.

Cookies we set

NameWhat it doesHow long it lasts
Name__Host-fl_sessionWhat it doesKeeps you signed in to First Light, or to an app you are a member ofHow long it lastsUntil you sign out, after 24 hours of inactivity, or 7 days at most
Name__Host-fl_oauth_stateWhat it doesProtects the sign-in with Google step from forgeryHow long it lasts10 minutes

Both can only be read by our servers, not by scripts in the page, and are sent only over secure connections.

Other storage in your browser

  • A note that this device has a passkey, so we can offer it next time.
  • Your unsent builder message, so it survives a page reload. It is cleared when you close the tab.

Cookies set by others

  • Stripe may set cookies in its card form to prevent fraud when you save or use a card. See Stripe's cookie policy.
  • Cloudflare may set cookies used for bot protection on some forms.

Apps built on First Light

Published apps cannot set their own cookies through First Light. An app's sign-in for its members uses the session cookie above, scoped to that app's address only.

Controlling cookies

You can block or delete cookies in your browser settings. If you block the session cookie, you will not be able to sign in.

Questions: privacy@fl.app.