Cookie Policy
Last updated · June 1, 2026
We try to be honest about what we put in your browser. This page explains what cookies and similar technologies NextTry uses, why we use them, and how you can turn them off if you would like.
Who this applies to
This policy applies to hknexttry.com and the nSpace app. Anywhere this Cookie Policy is linked or referenced, the terms below apply. By continuing to use NextTry you agree to the use of these technologies for the purposes described here.
For the bigger picture (what data we collect, how it is stored, your rights), see our Privacy Policy.
What technologies are used
We use a small number of well defined technologies. We do not use third party advertising networks, behavioural tracking pixels, or cross site ad IDs.
- Cookies. Tiny files placed on your device by your browser. We use both session cookies (gone when you close the browser) and persistent cookies (that expire on a set date). See the table below for which kind is which.
- Local storage. A small slot of in browser storage we use to remember things like your last used theme or a recently dismissed in app message. Local storage stays on your device until you clear it. It is never sent automatically to our servers.
- Session storage. Like local storage, but cleared when you close the tab. We use it for short lived things like a half completed form draft.
What we use them for
- Authentication.When you sign in with email or Google, we set a signed session cookie so you do not have to log in on every page. This is the cookie that makes “stay signed in” work.
- Security. A small CSRF token cookie protects sign in and form submissions from being forged by a third party site. PKCE values for the Google OAuth flow are stored briefly during sign in and discarded right after.
- Preferences. Local storage remembers small interface choices, for example which view you last had open in nSpace, so the app feels familiar when you come back.
- Reliability. A short lived cookie remembers where you were trying to go before signing in, so we can send you back there afterwards.
We do not use cookies for advertising, retargeting, or cross site behavioural profiling. We do not sell your data.
The cookies we set
The exact name a cookie has can vary by browser (some have a __Secure-prefix in production). The table is the source of truth for what the cookie does.
| Cookie | Purpose | Lifetime |
|---|---|---|
| next-auth.session-token | Keeps you signed in after you log in. Without it you would be logged out on every page. | 30 days |
| next-auth.csrf-token | Anti CSRF token for sign in forms. Prevents another site from hijacking your sign in. | Session |
| next-auth.callback-url | Remembers the page you were trying to reach so you land back there after signing in. | Session |
| next-auth.pkce.code_verifier | Protects the Google OAuth handshake. Set briefly during sign in, deleted right after. | Minutes |
When (and only when) we turn on Stripe powered payments, Stripe may set its own cookies for fraud prevention on the checkout page. Stripe documents those here. That part of the service is currently disabled.
Third parties
The only third parties whose cookies could load on NextTry are:
- Google, when you choose to sign in with Google. Google may set its own cookies during that flow, governed by the Google Privacy Policy.
- Stripe, only on the (currently disabled) checkout flow.
We do not embed any analytics service (no Google Analytics, no Meta Pixel, no Mixpanel, and so on). Our usage analytics are stored first party in our own database, with truncated IP hashes. See the Privacy Policy for detail.
Your choices
You have control over cookies and similar technologies on your device. Note that turning off authentication cookies will sign you out and may prevent parts of nSpace from working at all.
- Browser controls.All major browsers let you view, block, or delete cookies through their settings. Look for “Privacy” or “Cookies and site data”.
- Sign out. Clearing your session is one click away (Settings, then Sign out) and will remove the session cookie immediately.
- Local storage. You can clear local and session storage from the same browser settings panel as cookies.
- Do Not Track (DNT). We do not run third party advertising and do not track you across sites, so we do not rely on DNT signals. We treat all visitors the same way regardless of the header.
Changes to this policy
We will let you know about meaningful changes through an in app notice and an email at least 30 days before they take effect. Minor edits (typos, clarifications) may go live without notice. The “Last updated” date at the top will always reflect the current version.
Contact
Questions about cookies or anything else? Email hakest@nexttryhk.com. We read everything.