Legal / 02
Cookie Policy
Last updated 7 September 2026
A cookie is a small file a site stores in your browser. EtherSSH uses cookies only where the service cannot work without them: signing you in, protecting form submissions, remembering your theme and keeping the site available. Everything on this page is listed in full.
No consent banner games. EtherSSH sets no analytics, advertising, profiling or social-media cookies, so there is nothing to opt out of and nothing is loaded conditionally. Strictly necessary cookies do not require consent under UK PECR — but you still have the right to know about them, which is what this page is for.
01Cookies used by EtherSSH
| Cookie | Purpose | Lifetime | Type |
|---|---|---|---|
.AspNetCore.Identity.Application |
Keeps you signed in after authentication. Encrypted and HTTP-only, so page scripts cannot read it. | 2 hours sliding; 28 days if you tick "Keep me signed in" | Essential |
Identity.TwoFactorUserId |
Holds the pending sign-in between your password and your second factor. | Session (deleted once 2FA completes) | Essential |
Identity.TwoFactorRememberMe |
Set only if you ask us to remember this browser, so it does not prompt for a code on every sign-in. | Up to 14 days | Essential |
.AspNetCore.Antiforgery.* |
Anti-forgery token that pairs with a hidden form field to block cross-site request forgery. | Session | Essential |
.AspNetCore.Correlation.*, .AspNetCore.OpenIdConnect.Nonce.* |
Short-lived cookies that secure the single sign-on round trip. Set only when you sign in with EtherLogin. | 15 minutes | Essential |
ether_theme |
Remembers your interface and terminal theme (system, light or dark) so the page paints correctly before any stylesheet loads. | 12 months | Essential |
02Cookies set by Cloudflare
The service is served through Cloudflare, which protects it against attacks and abuse. Cloudflare may set its own strictly necessary cookies on our domain:
| Cookie | Purpose | Lifetime | Type |
|---|---|---|---|
__cf_bm |
Distinguishes people from bots so automated traffic can be filtered. | 30 minutes | Essential |
cf_clearance |
Records that a security challenge was passed, so it is not shown again. | Up to 1 year | Essential |
Details are published in Cloudflare's cookie documentation.
03Local storage
Some preferences are kept in your browser's local storage rather than in a cookie, which means they are never transmitted to our servers:
etherssh.cookie-notice.v1— records that you dismissed the cookie notice, so it is not shown again. Using local storage here means we do not have to set a cookie whose only job is to remember that we told you about cookies.- Interface preferences such as the theme mirror, panel sizes and the last workspace view.
04Controlling cookies
Every browser lets you view, block and delete cookies from its settings, usually under "Privacy" or "Site data". Blocking cookies for this site is your right — but because all of ours are strictly necessary, blocking them means you cannot sign in, form submissions will be rejected as forgeries, and your theme resets on every page load.
Clearing your browser's local storage for this site brings the cookie notice back the next time you visit.
05Changes
If we add a cookie, this page is updated before it ships and the date at the top changes. If we ever introduce a cookie that is not strictly necessary, we will ask for your consent first and give you a way to withdraw it.
See also the Privacy Policy for how the data behind these cookies is handled.
Questions about this document? Write to [email protected].