P

PostHub

Waking up your workspace

Legal 11 sections Last updated October 2026

CookiePolicy

Every cookie PostHub sets, what it is for, how long it lives — and an honest account of the ones we do not have: no analytics, no advertising, no cross-site tracking.

01

What cookies are

Small text files your browser stores for a site — nothing more exotic than that.

Cookies are small text files your browser stores on your device and sends back to the site that set them. They let a site remember you between requests — staying signed in, carrying a security token, remembering a choice you made. They cannot run programs, and they are only sent back to the domain that set them.

This page lists exactly what PostHub sets today. If a cookie is not on this page, we do not set it.

02

Cookies we set

Eight first-party cookies, all strictly necessary. No optional or third-party cookies exist on this site today.

Every cookie below is set by posthub.shorix.io itself (first party) and is marked "Strictly necessary" — without them you could not sign in, your session could not be protected, and connecting a social account would not work. Because there are no optional cookies, there is nothing to toggle off here; your consent choice is still recorded so the position is documented and future optional categories have somewhere to live.

CookieWhat it doesHow longCategory
posthub_accessYour signed-in session (an httpOnly JWT) — proves who you are on every API call.30 minutesStrictly necessary
posthub_refreshRenews the session silently so you are not asked to sign in every half hour.7 daysStrictly necessary
posthub_expReadable copy of the session expiry, so the app refreshes before the session dies.30 minutesStrictly necessary
posthub_csrfSigned anti-forgery token replayed on state-changing requests.2 hoursStrictly necessary
posthub_2faHolds the two-factor challenge between entering your password and the code.10 minutesStrictly necessary
posthub_oauth_stateGuards the redirect back from a social platform while you connect an account.15 minutesStrictly necessary
clickup_oauth_stateThe same guard for the ClickUp integration.10 minutesStrictly necessary
posthub_adminAdmin-console unlock for staff accounts only. Never set on a normal account.12 hoursStrictly necessary

All eight are httpOnly except posthub_exp, which carries no secret — only a timestamp. All are SameSite=Lax and Secure in production. The last four only exist while their flow is in progress (and posthub_admin only for staff).

03

Local storage

Not a cookie, same job — and it never leaves your device.

Alongside cookies, PostHub keeps a few values in your browser’s local storage. They are not sent to us with requests and they are removed when you clear your site data.

  • posthub_consent — the choice you make in the cookie banner: "all" or "necessary". That is the whole value; no identifier, no timestamp.
  • posthub_cookie_consent — the same kind of preference saved by the earlier version of the banner, so a returning visitor is not asked twice.
  • posthub_theme and posthub_tz — your light/dark choice and time zone, so the app opens the way you left it.
  • Dashboard working state — an unsent composer draft, calendar notes, media and sound preferences, and whether you have seen the first-run tour. Cleared when you clear site data.
04

Analytics

None. We do not measure your browsing with cookies or scripts.

PostHub sets no analytics cookies and loads no third-party analytics script. There are no page-view pixels and no behavioural profiling. The numbers you see in the product’s analytics screens come from our own publishing records for the posts you published — not from anything watching you move around this site.

05

Advertising and sharing

None. No ad network drops a cookie through our pages.

We do not run advertising cookies, cross-site tracking pixels or remarketing tags, we do not sell data about your browsing, and no ad network sets anything through our pages. Because there is nothing to opt out of, there is no advertising opt-out control to show you.

06

Platforms you connect

Once you authorise one, that platform applies its own cookie policy to you.

Connecting Instagram, Facebook, X, LinkedIn, TikTok, YouTube or any other supported platform takes you through that platform’s own authorisation page, where their cookies and privacy policy apply. PostHub does not control them. Our own pages do not load their advertising or tracking scripts, and the tokens they issue to us are stored server-side — see the Privacy Policy.

08

Managing cookies in your browser

Every browser can block or delete them — blocking the session cookies signs you out.

You can inspect, block and delete cookies from your browser’s own settings:

  • Chrome — Settings → Privacy and security → Third-party cookies, or the icon beside the address bar for one site.
  • Firefox — Settings → Privacy & Security → Cookies and Site Data → Manage Data.
  • Safari — Safari → Settings → Privacy → Manage Website Data, then Remove.
  • Edge — Settings → Cookies and site permissions → Manage and delete cookies and site data.
  • Blocking or deleting the session cookies above will sign you out of PostHub — that is the only practical effect.
09

Do Not Track

We do not track across sites either way, so your DNT signal changes nothing here.

Do Not Track asks sites not to follow you around the web. PostHub runs no cross-site tracking or advertising cookies regardless, so a DNT signal does not alter what we store or what you see — honestly, there is nothing for it to switch off. Your browser’s cookie and site-data controls remain the control that matters.

10

Changes to this policy

Material changes are posted here with an updated date.

We update this page when cookie usage changes. The date at the top of the page shows the last update, and a material change is announced in the app or by email before it takes effect.

11

Contact

Questions about cookies or your data: support@posthub.shorix.io.

Email support@posthub.shorix.io with a question about this policy, or open a ticket on the support page — either way a person reads it and replies within one business day. For what we store about you beyond cookies, see the Privacy Policy.

Still have a cookie question?

Write to support@posthub.shorix.io — we reply within one business day.