# Cookies and Local Storage

> Analytics cookies only with your consent, no advertising cookies. What SetupBook keeps in your browser for sign-in and preferences, and how to clear it.

- Source: https://setupbook.io/legal/cookies
- Site: SetupBook
- Language: en
- Updated: 2026-10-30

## The short version

SetupBook uses no advertising or tracking cookies. We store what the app needs to work, and two third parties may set cookies through our pages: Google reCAPTCHA, to tell people from bots, and Google Analytics, only after you allow it in the bar at the bottom of the public pages. Saying no is remembered just as well as saying yes, and nothing is measured before you choose.

## What we store in your browser

| Name | Type | Purpose | How long |
|---|---|---|---|
| Firebase authentication data (`firebase:authUser:...`, `firebaseLocalStorageDb`) | IndexedDB / local storage | Keeps you signed in | Until you sign out |
| `theme` | Local storage | Light, dark or system theme | Until you clear it |
| `setupbook:last-used` | Local storage | Remembers the account, symbol and other choices you used last on the trade form | Until you clear it |
| `setupbook:trades-view` | Local storage | The layout you picked for the trades list | Until you clear it |
| `setupbook:just-onboarded` and prop firm warning markers | Session storage | Show a welcome or limit warning once per visit | Until you close the tab |
| `setupbook:onboarding-step`, `setupbook:tutorial-begun:first_run`, `setupbook:onboarding-next`, `setupbook:arrive` | Session storage | Keep your place in the first-run introduction if the page reloads, open what you chose at its end and let the app fade in once after it | Until you close the tab or finish the introduction |
| Shared card view marker | Session storage | Counts your view of a shared trade only once | Until you close the tab |
| `setupbook:analytics-consent` | Local storage | Your answer to the analytics question, yes or no | Until you clear it |
| `_ga`, `_ga_<id>` (Google Analytics) | Cookie, set by Google | Tells returning visits apart so we can count visitors and see which pages lead to a sign-up. Set only after you allow analytics | 2 years |

None of these are used to identify you across websites, and none are sent to advertisers.

## Third parties

- **Google reCAPTCHA Enterprise.** Protects the sign-up, sign-in and password reset forms, and the app's requests to our database, from automated abuse. It runs invisibly, may set a `_GRECAPTCHA` cookie on google.com, and processes your IP address and browser details under [Google's privacy policy](https://policies.google.com/privacy) and [terms](https://policies.google.com/terms). This is strictly necessary to keep the service running, so it needs no consent.
- **Google Analytics 4.** With your consent, measures page views and a short list of actions (creating an account, confirming the address, which introduction screens you saw and whether you skipped them, finishing the first setup, logging or importing a trade, connecting a platform). We never send it symbols, prices, results, notes, tags, your email or any wellbeing rating, and the ids in page addresses are removed before they are sent. With your consent it does receive your account id (a random string, not your email) and, when a platform connection fails, the platform's name and the error, so that a problem you report can be traced to the attempt that failed. IP addresses are not stored by Google Analytics 4, Google signals are off, data is kept for 14 months and is processed in the United States under the EU-US Data Privacy Framework. Withdraw consent by clearing `setupbook:analytics-consent` from local storage, which brings the bar back.
- **Google sign-in.** If you choose "Continue with Google", Google sets its own cookies on its own domain in the sign-in window, under Google's policies.
- **Market data.** Chart candles are loaded from the public market data services of Binance, Bybit, Coinbase and Alpaca without cookies.

## How to control them

You can delete local and session storage and cookies in your browser settings at any time. If you delete the sign-in data you will be signed out; if you delete preferences they return to their defaults; if you delete the analytics choice the bar asks again. Analytics is the only optional item on this page, and it stays off until you say yes.

More about how we handle personal data is in the [privacy policy](https://setupbook.io/legal/privacy).