Cookie policy
Last updated: October 22, 2026.
TrackNotes uses browser cookies for sign-in, account security, form protection, temporary status messages, and an appearance preference you choose to save. The web application does not add advertising or third-party audience analytics cookies.
Cookies used by the web application
Framework-generated suffixes can vary. Durations below describe application configuration; session cookies can also depend on your browser's session-restoration settings.
| Cookie | Purpose and when used | Duration |
|---|---|---|
| TrackNotes.Google.Session | Required to access your account after successful Google sign-in. | Session cookie; the sign-in ticket expires after six hours without sliding renewal. |
| .AspNetCore.Identity.External | Temporary Google identity proof while completing sign-in, account creation, linking or deletion verification. | Temporary ticket, normally five minutes. |
| .AspNetCore.Correlation.* | Validates a Google sign-in or verification response against the request you started. | Temporary authentication cookie, normally up to 15 minutes; removed on callback. |
| .AspNetCore.Antiforgery.* | Helps protect forms against requests submitted by another site; set when a protected form is rendered. | Browser session. |
| TrackNotes.Delete | Short-lived proof that you verified the same Google identity before confirming account deletion. | Five-minute ticket; cleared when deletion is submitted or you sign out. |
| Identity.StatusMessage | Displays an account action's status after a redirect, when needed. | Five seconds. |
| tracknotes-theme | Remembers light, dark or system appearance after you save preferences. Existing appearance cookies are synchronized with your account preference. | Up to one year from its latest update. |
Your controls
A first visit does not create the appearance cookie. You can change appearance in Settings, or remove the cookie through your browser settings. Removing it does not delete the preference saved in your account. Your browser can clear or block cookies, but blocking security and sign-in cookies may prevent account features from working.
The current web application does not offer optional advertising or audience-tracking categories, so it does not display an accept-all cookie banner. If those technologies are introduced, the cookie information and applicable controls must be updated before use.
Other services
Google sign-in and Stripe-hosted payment pages are separate services and may use their own storage. Hosting and security services may also set cookies as part of delivering or protecting requests. See Google's privacy policy and Stripe's privacy policy. This inventory covers the TrackNotes web application's cookies; it does not describe cookies on separate third-party websites.
Questions about cookies or personal information: [email protected]. See the Privacy policy.