Cookies

trellis.session-token. Keeps you signed in. HttpOnly, SameSite Lax, secure in production, 30 days. Set when you sign in and cleared when you sign out.

trellis.account. A signed copy of your account record, so signing in and the plan you paid for survive a server restart on our serverless platform. HttpOnly, signed with a server secret, one year.

trellis.meter. A signed count of how many free readiness checks you have run this calendar month, so the free limit holds across restarts. HttpOnly, signed, 62 days.

theme. Remembers the appearance you chose. Trellis defaults to light and does not follow your operating system setting unless you ask it to. Not HttpOnly, since the page needs to read it before paint, one year.

• No advertising or retargeting cookies.
• No cross-site tracking, no fingerprinting, no session recording.
• No third-party analytics cookies.

You can clear or block cookies in your browser. If you block the session cookie you cannot stay signed in, and if you block the meter cookie the free tier limit still applies, because it is also counted on the server.

If we add a cookie we will list it here first. If we ever add one that is not strictly necessary, we will ask you before setting it.