Cookie Policy
Last updated: April 1, 2026
subway.dev uses a small number of cookies. This page explains what they are, why we use them, and how to control them.
The Subway relay, CLI, and SDKs do not use cookies.
What are cookies
Cookies are small text files stored by your browser when you visit a website. They help sites remember your session, preferences, and usage patterns.
Cookies we use
| Name | Provider | Purpose | Type | Duration |
|---|---|---|---|---|
_ga | Google Analytics | Distinguishes unique users by assigning a randomly generated number as a client identifier | Analytics | 2 years |
_ga_* | Google Analytics | Persists session state across page loads | Analytics | 2 years |
_gid | Google Analytics | Distinguishes users for the current 24-hour period | Analytics | 24 hours |
_gat | Google Analytics | Throttles request rate to Google Analytics | Analytics | 1 minute |
next-auth.session-token | Auth.js | Maintains your login session on the dashboard | Essential | 30 days |
next-auth.csrf-token | Auth.js | Prevents cross-site request forgery during authentication | Essential | Session |
next-auth.callback-url | Auth.js | Stores the redirect URL during OAuth login flow | Essential | Session |
Essential vs analytics
Essential cookies are required for the dashboard to function. Without them, login and session management would not work. These are set only when you actively log in.
Analytics cookies are set by Google Analytics to help us understand how people use subway.dev — which pages are visited, where traffic comes from, and how long people stay. These are not required for the site to function.
Google Analytics
We use Google Analytics 4 (property G-1H2FJLN6YZ) and Google Tag Manager (GTM-KPN3VLWW). GA4 anonymizes IP addresses by default. We do not send any user identity information (email, name, user ID) to Google Analytics.
Google's data practices are governed by the Google Privacy Policy.
How to control cookies
Block analytics only
Install the Google Analytics opt-out browser add-on. This blocks GA on all sites, not just ours.
Block all cookies
Your browser settings allow you to block or delete cookies. This may prevent dashboard login from working, but the relay, CLI, and SDKs are unaffected.
Use a tracker blocker
Extensions like uBlock Origin or Privacy Badger will block analytics cookies automatically while keeping essential cookies intact.
The relay and CLI
The Subway relay (relay.subway.dev) does not use cookies. It serves a QUIC/WebTransport endpoint and a health API — no browser session is involved.
The Subway CLI stores a local Ed25519 keypair at ~/.subway/keys. It does not use cookies, local storage, or any browser technology.
The Subway SDKs (npm: subway-sdk, pip: subway-sdk) are networking libraries. They do not use cookies or send any data except the P2P messages your application explicitly transmits.
Changes
If we add new cookies or change analytics providers, we will update this page with the new date. We will not introduce tracking beyond what is described here without updating this policy.
Contact
Questions about cookies: privacy@subway.dev