Last updated: 16 August 2026
Cookies are small text files that a website places on your device so it can recognise you, remember your preferences, and keep you logged in. Similar technologies we use include local storage and session storage. The iOS app displays Anthora in a secure WebView and currently uses the same first-party authentication cookies as the website. Its Share Extension uses an App Group queue for pending URL and text shares.
Throughout this policy, “cookies” refers to all of these.
Under the German Telecommunications Digital Services Data Protection Act (TDDDG §25) and the ePrivacy Directive, we may only place cookies that are strictly necessary for the Service to work without your consent. Every other cookie requires your explicit, opt-in consent.
That's why the first time you visit anthora.co you see a banner. Until you make a choice, only strictly necessary cookies are set.
Our consent banner gives you two equal choices:
Both buttons are the same size — we don't use dark patterns. You can change your choice at any time via Cookie settings in the site footer. Your consent is stored for 12 months; after that we'll ask again.
These keep you logged in, protect against attacks, and make core features work. They do not require consent.
| Name | Purpose | Duration | Type |
|---|---|---|---|
| token | Short-lived JWT authentication token (15-min lifetime) | 7 days | HTTP cookie |
| __Host-anthora_access | Short-lived signed session credential | 15 minutes | Secure, HttpOnly, SameSite=Strict cookie |
| __Host-anthora_refresh | Rotating credential used to continue a signed-in session | 7 days | Secure, HttpOnly, SameSite=Strict cookie |
| anthora_session | Non-sensitive signed-in display marker; it cannot authorize API access | 7 days | First-party cookie |
| anthora_cookie_consent | Stores your cookie preference (Accept / Decline) | 12 months | Local storage |
Set only if you accept the analytics category in the banner.
| Name | Purpose | Provider | Type |
|---|---|---|---|
| Vercel Analytics ping | Anonymised page-view counting; no cross-site tracking, no fingerprinting | Vercel Inc. (USA, SCCs) | Beacon only — no cookie stored |
Vercel Analytics does not use cookies, does not store a persistent identifier, and does not track you across websites. A hashed request fingerprint is used only to deduplicate views within a 24-hour window and is discarded afterward.
We do not use any of the following:
If we ever change this, we will update this policy and re-ask for consent before anything new is set.
Anthora may earn a commission when you follow an eligible recommendation and complete an action with a book, travel, ticket, restaurant, grocery, or retail partner. Anthora records the recommendation and item before redirecting you, but does not place an affiliate cookie on anthora.co. The destination partner may set its own cookie or use similar technology under its policy. You can avoid that partner tracking by not following the action link.
The Anthora iOS app uses these first-party storage mechanisms:
| Mechanism | Purpose | Platform |
|---|---|---|
| WebView cookies | Stores short-lived and rotating session credentials in Secure, HttpOnly cookies; the Share Extension only receives the short-lived access credential | iOS |
| Web storage | Stores non-sensitive preferences such as consent, palette, and navigation state | iOS |
| App Group UserDefaults | Temporarily queues URL and text shares until the signed-in app can save them; completed shares are removed | iOS Share Extension |
The app does not use advertising identifiers (IDFA), mobile analytics SDKs, or attribution SDKs. We don't show Apple's App Tracking Transparency prompt because we don't track you across other apps or websites.
Some list items may embed content from third parties (e.g. a map tile from Google Maps or an image from Pexels). When your browser loads this content, the third party may set its own cookies under its own policy:
We use privacy-preserving modes where available (e.g. YouTube's youtube-nocookie.com domain).
In Anthora: click “Cookie settings” in the site footer to change your consent at any time.
In your browser: all major browsers let you view, block, and delete cookies in their settings. Blocking strictly necessary cookies will prevent you from logging in.
In the mobile app: log out in Settings to clear authentication tokens. Deleting the app removes all locally stored data.
We respect the Global Privacy Control (GPC) signal. If your browser sends a GPC signal, we treat it as an opt-out of non-essential cookies — no banner click required.
We do not respond to traditional “Do Not Track” headers as no consistent standard was ever agreed upon, but GPC achieves the same goal.
We may update this policy when we add new features, change providers, or adapt to legal requirements. We will post the updated policy here with a new “Last updated” date. If we add a new cookie category or new non-essential cookie, we will re-ask for consent before setting it.
Contact our team at privacy@anthora.co.