Cookie Notice
Effective October 23, 2026. Substratal uses only what’s strictly necessary to run the Service. There are no advertising, analytics, or cross-site tracking cookies, so there’s nothing to opt in or out of.
Web Hub (hub.substratalapps.com)
| Name | Type | Purpose | Lifetime |
|---|---|---|---|
__Host-sub_rt |
Strictly necessary, first-party, HttpOnly, Secure, SameSite=Strict |
Keeps you signed in by holding your session’s refresh credential where page scripts can’t read it. Requests that use it must also carry a custom header, which protects them from cross-site forgery. | Until you sign out, or the session expires (30 days after last use, 90 days at most) |
| Local storage: appearance and layout | Strictly necessary (preferences you set) | Remembers your theme and pane or column layout on this device | Until you clear it |
Access tokens are kept in memory only, never in cookies or storage. Signing out clears the cookie and the site’s stored data.
Native Hub apps
The macOS, Windows, Linux, iOS and Android apps don’t use cookies. They keep your session credential in the operating system’s secure storage (Keychain, Credential Manager, the Secret Service, or Android Keystore).
This documentation site
This site is static, hosted by GitHub Pages, and sets no cookies of its own. It stores your theme choice, if you change it, in your browser’s local storage. GitHub may process technical data such as your IP address to deliver the pages; see GitHub’s privacy statement.
Questions
privacy@substratalapps.com. See also the Privacy Policy.