Last updated: July 28, 2026
This page lists every cookie and browser storage key MicTask.dev uses, what each one is for, and how long it lasts. We keep it short because the list is short.
We use two kinds of storage. Essential ones keep you signed in and protect the sign-in flow — without them the app cannot work, so they don't require consent. Analytics cookies help us see how the product is used, they are entirely optional, and they are not set unless you accept them.
If you reject them we still count the visit, but without storing anything on your device: no cookie, no local storage, nothing to delete afterwards. In that mode we cannot recognise you across visits — we only see that a page was viewed, and roughly where the visit came from. That is the whole point of measuring this way: we get to know whether the site works, you get to keep your device untouched.
| Name | Type | Purpose | Duration |
|---|---|---|---|
| sb-<project>-auth-token | Essential | Keeps you signed in. | Session |
| notion_oauth_state | Essential | Protects the Notion connection flow against cross-site request forgery. | 10 minutes |
| ph_<key>_posthog | Analytics | PostHog. Only set if you accept. | 12 months |
| mictask.cookie-consent | Essential (local storage) | Remembers your choice here, so we stop asking. | 12 months |
| theme | Essential (local storage) | Remembers light or dark mode in the dashboard. | Until cleared |
We use PostHog to understand which features get used and where people get stuck. Our PostHog instance is hosted in the European Union, and requests are proxied through our own domain.
Until you accept, it runs in cookieless mode. Instead of an identifier stored in your browser, PostHog derives a short-lived, privacy-preserving hash on its own servers, which rotates daily and cannot be tied back to you. Nothing is written to your device, so this needs no consent — we rely on our legitimate interest in knowing whether the site works, as explained on our GDPR page. If you accept, we switch to the normal mode with the cookie listed above.
Inside the signed-in dashboard we also record session replays, so we can see where the interface is confusing. These only happen if you accepted analytics cookies — replay needs to store an identifier in your browser, so the cookieless mode above cannot produce one. They are never active on the public pages, and every input field is masked, so what you type in Brain settings or anywhere else is not captured.
You can change your choice at any time, and rejecting is as easy as accepting. Your browser settings can also block or delete cookies, though blocking the essential ones will sign you out.
See our Privacy Policy for how we handle personal data in general, and our GDPR page for your rights, our sub-processors and international transfers.
Questions about this policy? Email us at hola@mictask.dev.