A cookie is a small value saved by your browser and sent to a website on relevant requests. Local storage lets a website remember preferences within a browser. This policy explains the storage we identified in Hookstride's current first-party frontend.
1. Essential authentication cookie
hookstride_web_session is an HTTP-only, SameSite=Lax session cookie used to maintain a signed-in account. Its value is protected using authenticated encryption before storage in the browser. The expiration is also enforced inside the encrypted value, separately from the browser's cookie expiry. The session and the underlying dashboard token expire after at most 12 hours. It is marked Secure on production HTTPS connections.
2. MFA verification cookie
hookstride_mfa_pending is an HTTP-only, SameSite=Lax cookie used temporarily while a privileged account completes two-step verification or enrollment. It contains encrypted challenge state, not a reusable plain-text password. Its lifetime is approximately 10 minutes or less, subject to the sign-in flow.
3. Appearance preference
webhook-docs-theme is a value in browser localStorage that stores your choice of light or dark appearance. It is a display preference, not an authentication secret or behavioral advertising identifier. It typically remains until you clear site storage or change the preference. The website can work with its default theme if storage is disabled.
4. Other essential or external storage
Infrastructure or server-side authentication integrations may set additional necessary security or session cookies. If you choose an external authentication provider or proceed to the Paystack checkout site, that provider may use cookies governed by its own policies on its domains. Hookstride does not control those independent cookies.
5. Advertising and analytics
In the current first-party frontend, Hookstride does not deliberately set marketing or cross-site behavioral advertising cookies. We do not require optional advertising cookies for account registration or webhook delivery. If non-essential analytics or advertising storage is introduced later, this policy will be updated and the required choice or consent controls will be provided before such storage is used where law requires.
6. How to control storage
You may clear cookies and website data, block storage in browser settings, or use private browsing. Blocking the authentication or MFA cookies can prevent sign-in and account actions. Clearing local storage resets your appearance preference. Browser interfaces vary by vendor and device.
7. More information
For details about account and webhook data, read the Privacy Policy. Contact privacy support if you need information about a storage technology not listed here.
Questions about these policies?
Send a message through Hookstride Support. Choose billing, security or privacy as appropriate. Never include passwords, API keys, recovery codes, or personal data from an event payload in your message.