Cookies
Cookies, in plain words
Tengu sets no advertising cookies. From your first visit, on the public site and in the app, it sets PostHog’s analytics cookie, to see how Tengu is used. This page lists every cookie and browser-storage key Tengu uses: who sets it, what it is for and how long it lasts.
Last updated October 27, 2026
Analytics, and no cookie banner
Tengu uses PostHog to see how its pages are used: which pages people open, what they click, and recordings of visits to Tengu’s pages. PostHog’s cookie tells one browser’s visits from another’s and, once you sign in, ties them to your account. The privacy page says what the recordings hold and what they leave out.
There is no cookie banner: PostHog’s cookie is set for everyone, from the first page, without asking. Every other cookie Tengu sets either keeps Tengu working (signing you in, keeping a connection you started safe, paying) or keeps a choice you made (your workspace, your look, your layout).
Every cookie and storage key
| Name | Set by | What it is for | How long | Kind |
|---|---|---|---|---|
ph_<project token>_posthog(a cookie, and the same in local storage) | PostHog, for Tengu | Tells this browser's visits from another's, for Tengu's analytics and its recordings of visits to its pages; once you sign in, ties them to your account. Set from the first page, on this site and in the app. | A year | Analytics |
ph_<project token>_window_idph_<project token>_primary_window_exists(the tab's session storage, not a cookie) | PostHog, for Tengu | Tells this tab from your others, so a recording follows one tab. | Until you close the tab | Analytics |
sb-<project>-auth-token(split into .0, .1 and so on when long) | Supabase, for Tengu | Keeps you signed in on this device, and whether this sign-in had your authenticator app's code when you use two-factor sign-in. | Until you sign out, up to 400 days | Strictly necessary |
sb-<project>-auth-token-code-verifiersb-<project>-auth-token-flows-code-verifiersb-<project>-auth-token-flow-<id>-code-verifier | Supabase, for Tengu | Checks that a sign-in link, or signing in with Google, comes back to the browser that asked for it. | Until you sign out, up to 400 days | Strictly necessary |
tengu_next | Tengu | The page a link pointed to, kept while you accept an invite and go through the walkthrough. Deleted once used. | Up to an hour | Strictly necessary |
tengu_plan_pick | Tengu | A paid plan you picked on the pricing page, kept from creating your organization to the end of its walkthrough. | Up to a day | Strictly necessary |
clickup_oauth_noncegithub_connect_nonceslack_oauth_nonceslack_link_nonceslack_user_noncemcp_oauth_noncemcp_oauth_connectionmcp_oauth_projectgoogle_oauth_nonce | Tengu | Checks that connecting ClickUp, GitHub, Slack, Google Drive, Google Calendar or one of the company's connections (which one, and the project it was connected from), linking your Slack account, or letting Tengu reply as you in Slack, comes back to the person who started it. | 10 minutes | Strictly necessary |
__stripe_mid | Stripe | Prevents card fraud. Set only when an owner or admin opens a card form or confirms a payment in Admin. | A year | Strictly necessary |
__stripe_sid | Stripe | The same, for one visit. | 30 minutes | Strictly necessary |
tengu_org | Tengu | Which of your workspaces you have open. | A year | Your choice |
tengu_view_as | Tengu | The lower role an owner or admin is previewing the workspace as, read-only. Deleted when they exit the preview. | Until you close the browser | Your choice |
tengu_looktengu_mode | Tengu | Your look (Tengu, Sleek or Onyx) and its light or dark, so each page paints in it from the first frame. | A year | Your choice |
koba_themekoba_shade | Tengu | Your Tengu theme and shade. | A year | Your choice |
soshi_today_tray | Tengu | Whether Today stays open beside the board. | A year | Your choice |
soshi_focus | Tengu | The project the board is focused on. Deleted when you clear the focus. | A year | Your choice |
soshi_subtasks | Tengu | That Mine shows your subtasks as separate rows instead of under their parent. Deleted when you put them back under their parent. | A year | Your choice |
soshi_agents_assigned | Tengu | That the board's Agents tab shows only the Claude work on tickets you're assigned to. Deleted when you turn Assigned to me off. | A year | Your choice |
soshi_board_filters | Tengu | The filters you picked on the board (status, due date, priority, today, tags). Deleted when you clear them. | A year | Your choice |
soshi_board_display | Tengu | How you grouped and sorted the board. Deleted when you put it back to status and the default order. | A year | Your choice |
soshi_board_tab | Tengu | Which tab the board was on (Pipeline, Mine, To review…), so coming back to it doesn't reset the tab. Deleted when you sign out. | A year | Your choice |
soshi_board_view | Tengu | Which saved view you last opened on the board, so its name stays lit in the bar. Deleted when you go back to the default view. | A year | Your choice |
soshi_board_folded | Tengu | The status groups you folded on the board, by tab. Deleted when you open them all again. | A year | Your choice |
soshi_guidance_folds | Tengu | The project cards you opened or folded on Team guidance. Deleted when you've chosen none. | A year | Your choice |
soshi_expanded | Tengu | How wide you dragged a ticket's panel. | A year | Your choice |
soshi_today_day | Tengu | How wide you dragged the calendar beside Today. | A year | Your choice |
soshi_keys | Tengu | Whether you turned single-key shortcuts off in Settings. Set only when you flip that switch. | A year | Your choice |
soshi_timer_hidden | Tengu | That you hid the timer in the top bar, in this browser, say before sharing your screen, or that you showed it again. | A year | Your choice |
soshi_notifysoshi_notify_off | Tengu | Whether you turned browser notifications on in Settings, in this browser, and which kinds you turned off. Set only when you flip one of those switches. | A year | Your choice |
soshi_ticket_links | Tengu | That you keep links to tickets in this browser instead of opening them in Tengu Timer, the desktop app, or that you turned it back on. Set only when you choose Keep in browser or flip the switch in Settings. | A year | Your choice |
soshi_opened_in_app | Tengu | The ticket a link just opened in Tengu Timer, so the browser doesn't hand the same ticket to the app again when the app sends it back to the browser. | A minute | Your choice |
soshi_sheet_banner | Tengu | Which week's timesheet reminder you put away with Not now, so the banner across the top stays hidden. Set only when you press it. | Until the Monday that week is due, at 09:00 | Your choice |
tengu:comment-draft:<you>:<ticket>(the tab's session storage, not a cookie) | Tengu | A comment you started on a ticket and haven't posted, with who you mentioned in it, so it is still in the box when you open the ticket again or reload. Deleted when you post it or clear the box. | Until you close the tab | Keeping what you wrote |
tengu:meeting-bar:hidden(the tab's session storage, not a cookie) | Tengu | The calls you hid from the meeting reminder at the bottom of the app, so a hidden call doesn't come back in this tab. | Until you close the tab | Keeping what you've seen |
tengu:claude-dock-seen:<you>(the tab's session storage, not a cookie) | Tengu | What each ticket's Claude work said when you last opened it from the Claude dock on the board, so the dock shows only what's new to you in this tab. | Until you close the tab | Keeping what you've seen |
tengu:inbox-opened:<you>(the tab's session storage, not a cookie) | Tengu | Only on a page that draws the crow (the hunter scene, today a preview): when you last opened your inbox in this tab, so the crow doesn't bring you again what you've already seen. | Until you close the tab | Keeping what you've seen |
tengu:report-read:/r/<link>tengu:report-read:/v/<link>(the tab's session storage, not a cookie) | Tengu | On a shared client report or a shared screen recording: notes that this tab counted your view, so a reload within the hour isn't counted again. | Until you close the tab | Counting a view |
Every cookie here is set on Tengu’s own site. Stripe may also set cookies inside its card form, on its own domain: see Stripe’s cookie policy. Opening a shared report also deletes any notes earlier versions of Tengu left in the browser’s local storage.
Where they are set
- Every page, on the public site (the home page, pricing, the blog and pages like this one) and in the app, sets PostHog’s: its cookie, and its keys in the tab’s session storage. Until you sign in or sign up, the public site sets nothing else.
- Signed in, the app sets the sign-in cookies; tengu_org when you open or join a workspace; tengu_view_as while an owner or admin previews a lower role; the look cookies (tengu_look, tengu_mode, koba_theme, koba_shade) from the look, theme and shade saved with your account, on each device you sign in on; and the layout and shortcut cookies as you make those choices.
- Signed in, a comment you start on a ticket and haven’t posted is kept in that tab’s session storage until you post it or clear it.
- A shared client report sets only PostHog’s for a reader who isn’t signed in.
- Stripe’s two are set only when a card form opens or a payment is confirmed in Admin. Stripe’s script then stays loaded in that tab until you reload or close it, and its cookies last as listed above.
Do Not Track and Global Privacy Control
Tengu doesn’t track you across sites: PostHog’s cookie is Tengu’s own, read only on Tengu’s pages. Tengu doesn’t change what it does for a Do Not Track or Global Privacy Control signal: every browser is treated the same, whatever it sends.
How to clear them
Signing out clears the sign-in cookies, and PostHog’s cookie stops being tied to your account: it stays, as a new visitor’s. Closing a tab clears what it kept in session storage: a report’s note, any comment you started there and didn’t post, and PostHog’s keys. Every browser can also show and delete the cookies a site has set: look for cookies or site data for tengu.work in its privacy settings. Clearing or blocking them signs you out and puts your layout (the nav, Today, the board’s focus, panel width and single-key shortcuts) and the workspace you had open back to their defaults; your look returns from your account when you sign in again. Nothing in your workspace is lost.
Questions
Write to hello@tengu.work. The privacy page says what else we collect and why.