Cookie policy
Last updated: October 27, 2026
This text is a draft and will be reviewed by a lawyer.
Scope
This policy explains the cookies and similar browser storage entries used on the website at https://replyhook.app and on the ReplyHook dashboard and sign-in screens that run on the same domain. We do not use advertising cookies or third-party tracking cookies.
Website
The website does not set cookies. Your cookie choice is stored only in your browser’s local storage (localStorage). No analytics or advertising tools are loaded on the website today. Non-essential tools are off by default; if analytics is added in the future, it will only run if you chose “Accept all”, and this policy will be updated first.
rh_consent
- Type
- Local storage (localStorage)
- Purpose
- Remembers your cookie choice:
necessary(necessary only) orall(accept all). It is never sent to the server. - Duration
- Until you delete it or clear your browser data
Dashboard and sign-in screens (necessary cookies)
When you sign in, the ReplyHook dashboard uses the first-party cookies below. They are necessary for the service to work and are not affected by your cookie choice. All of them are set with SameSite=Lax; when the site is served over HTTPS, rh_s and rh_acc are also marked Secure. The form security (CSRF) token is not stored in a cookie but in the session record on the server.
rh_s
- Type
- Cookie (first-party, HttpOnly)
- Purpose
- Session: recognises that you are signed in. Its value is a random token; the server stores only a one-way hash of it.
- Duration
- 30 days; deleted when you sign out or delete your account
rh_acc
- Type
- Cookie (first-party, HttpOnly)
- Purpose
- Remembers the Instagram account (account number) you selected in the dashboard.
- Duration
- 1 year; deleted when you switch workspaces, sign out or delete your account
lang
- Type
- Cookie (first-party)
- Purpose
- Remembers your language (
troren) on screens shown before sign-in. It is only set when a language is chosen with?lang=in the address. - Duration
- 1 year
rh-theme
- Type
- Local storage (localStorage)
- Purpose
- Remembers the light or dark theme you chose in the dashboard. It is never sent to the server.
- Duration
- Until you delete it or clear your browser data
Third parties
There are no third-party cookies on the ReplyHook site. The website’s fonts are served from our own server. The dashboard and sign-in screens load fonts from Google Fonts; your browser then connects to Google’s servers and your IP address is sent to Google.
When you sign in with Google or connect your Instagram account, you are redirected to Google’s or Meta’s (Instagram) pages, where their own cookie and privacy policies apply.
Changing your choice
You can change your choice at any time with the “Cookie settings” link at the very bottom of the page. You can also delete or block cookies and site data in your browser settings; if you block necessary cookies you will not be able to sign in to the dashboard.
Contact
For questions about cookies, write to info@sefayilmaz.dev.