Cookie Policy

Cookies are small files a website stores in your browser. Local storage and session storage are similar browser features. This policy explains which of them nextlevelbuilder.io uses. It is part of our Privacy Policy.

We use cookies and storage that are needed to run the site or remember choices you make, plus Google Analytics cookies to measure how the site is used in aggregate. We do not use advertising cookies or sell data collected through cookies.

• better-auth.session_token (sent as __Secure-better-auth.session_token over HTTPS): keeps you signed in. Lasts up to 7 days and is renewed while you use the site.
• Short-lived sign-in cookies set by our authentication service during Google, GitHub or email-code sign-in: protect the sign-in flow against forgery. Removed when sign-in completes or within minutes.
• NEXT_LOCALE: remembers the language you chose (English or Vietnamese). Lasts one year, or until you switch language again.
• Cloudflare security cookies such as __cf_bm: set by our hosting provider only when it needs to tell people from bots. __cf_bm lasts 30 minutes.

These cookies are first-party (or set by Cloudflare acting for us) and are not used to track you across other websites.

• nlb-theme (local storage): remembers whether you prefer the system, light or dark theme. Stays until you clear your browser data.
• nlb_traffic_visitor (session storage): a random ID used to count page views without cookies. Deleted when you close the tab, and never created when your browser sends Do Not Track or Global Privacy Control.

Google Analytics 4 (provided by Google LLC) measures aggregate site usage, such as which pages are visited and how visitors arrive:

• _ga: first-party analytics cookie that distinguishes visitors. Kept for up to 2 years.
• _ga_<container-id>: first-party analytics cookie that keeps the state of a visit. Kept for up to 2 years.

We do not load Google Analytics when your browser sends Do Not Track or Global Privacy Control. You can also opt out with Google's Analytics opt-out browser add-on (tools.google.com/dlpage/gaoptout).

PostHog (provided by PostHog Inc.) measures product usage on nextlevelbuilder.io, including session replays with typed input masked:

• ph_<project-key>_posthog: first-party analytics cookie that keeps an anonymous visitor ID (or your account ID when signed in) and the current session. Kept for up to 1 year.
• PostHog also keeps short-lived replay and queue data in your browser's local and session storage.

PostHog does not load when your browser sends Do Not Track or Global Privacy Control.

Our own product traffic counts set no cookies: they use the session-storage ID above, which is hashed before product statistics are stored and is sent through our own servers. Private pages such as sign-in, account and profile are never counted there.

When you check out on Polar (polar.sh) or sign in on Google or GitHub, you are on their pages and their own cookie policies apply.

You can view and delete cookies and site data in your browser settings. If you block essential cookies, signing in will not work, and the site will fall back to your browser's language and theme settings.

If we add or change a cookie, we will update this page and its date first.

Next Level Builders · nextlevelbuilder.io · hello@nextlevelbuilder.io