Cookie policy

Last updated 1 November 2026

Cookies and similar technologies are small pieces of data that a website or app keeps in your browser. This page lists everything StemHaus keeps there, who puts it there and why. The things that start with the beta are marked From the beta.

In short

This website sets no cookies. It has no analytics, no advertising and no social media widgets, and its fonts come from this site, not from a third party.
If you click into the waitlist form, Cloudflare’s Turnstile bot check keeps one item in your browser’s local storage. It is there to keep bots out of the form.
Everything listed here is strictly necessary for something you asked for: joining the waitlist, staying signed in, paying. That is why there is no cookie banner and nothing to accept.

On this website

When you open a page on stemhaus.io, your browser stores nothing and contacts no one but us. Cloudflare, which hosts the site, sees your IP address and browser details as part of delivering it, as the privacy policy explains.

The waitlist form is the one exception. Turnstile loads only when you first click into the form, not when the page opens. Turnstile sets no cookies, but it does keep this one item, on Cloudflare’s own domain, where this site cannot read it:

Name	Set by	What it is for	How long it lasts
`cf.turnstile.u` Local storage	Cloudflare Turnstile, on challenges.cloudflare.com	Part of the bot check on the waitlist form. It is created only after you click into the form, and this site cannot read it.	Until you clear your browser’s site data

In the web app, when you sign in, and when you pay

The web app, the sign-in pages and the payment pages arrive with the beta. This is what they will keep in your browser. Clearing stemhaus.refresh signs you out.

Name	Set by	What it is for	How long it lasts
`stemhaus.refresh` Local storage	StemHaus, on app.stemhaus.io	Keeps you signed in, so that you do not sign in again every time you open the web app.	Until you sign out
`stemhaus.pending` Session storage	StemHaus, on app.stemhaus.io	Holds the temporary values of a sign-in while you are sent to the sign-in page and back.	Until the sign-in finishes or you close the tab
`WorkOS sign-in cookies` Cookies	WorkOS, on its sign-in pages	Keep you signed in to the sign-in service and protect it from abuse. Signing out ends the session.	Set by WorkOS
`Stripe cookies` Cookies	Stripe, on its payment pages	Prevent fraud and keep your payment secure.	Set by Stripe

The desktop app is not a website and uses no cookies. It keeps your sign-in token encrypted with your operating system’s secure storage, and its sync records in its own folder on your computer.

The law (the ePrivacy Directive, and the UK’s PECR) requires your consent before a site stores anything in your browser, unless it is strictly necessary to give you something you asked for. Everything above is: the bot check protects the form you chose to use, and the sign-in and payment items are what let you sign in and pay. If we ever add anything that is not, such as analytics, we will ask you first and update this page before we do.

What we do not use

We use no analytics cookies, advertising or retargeting cookies, social media plug-ins, fingerprinting or cross-site tracking, and we keep no identifier that follows you from site to site. That applies to everyone, including children, and it is why we have nothing to switch off for the Global Privacy Control or Do Not Track signals your browser may send. Our children’s privacy section explains who can use StemHaus.

Your choices

You can see and delete what a site keeps in your browser, or block it, in your browser’s settings. If you block Turnstile’s storage, the waitlist form may not let you join. If you clear stemhaus.refresh, you will need to sign in again.

Changes

When this list changes, the date at the top changes. Before we add anything that needs your consent, we will add the choice to this site first.

Contact

Questions about this policy: info@stemhaus.io.