Cookie policy

These make sign-in work. They are exempt from the consent requirement because the service cannot be provided without them, and there is no way to switch them off and still use an account.

__session — set by Clerk, our authentication provider. It holds your signed-in session, cannot be read by JavaScript, and is sent over HTTPS only.

__client_uat — also Clerk. It records when your session was last updated so the site knows whether to show you a signed-in or signed-out page before anything loads.

We do not set a CSRF cookie. The API verifies the Clerk token on every request and checks which origin issued it, which is what protects against cross-site requests here.

Two things live in your browser’s local storage. They stay on your device, are never sent to us, and are cleared when you clear site data.

be-outside.analytics-consent— whether you accepted or declined analytics. We keep it so the banner doesn’t ask you again every visit. Without it we would have to treat every page load as undecided, which means asking again.

be-outside.theme— light, dark, or follow your browser. This is why the page doesn’t flash white before turning dark.

Your distance units, currency and notification settings are not stored on your device — they are part of your account, so they follow you to another browser or the mobile app.

If you accept, Google Analytics sets _ga and _gid to count visits and see which features get used. _ga lasts two years and _gid 24 hours.

Until you accept, the Google tag is not loaded at all — no script is fetched, no cookie is set, and no request leaves your browser. That is stricter than the common approach of loading the tag with storage denied, and it is what UK PECR expects for non-essential cookies.

You can change your mind whenever you like in Settings. Withdrawing consent stops the tag and deletes the cookies it left behind. Declining changes nothing about how the product works.

None. We set no advertising cookies, run no third-party ad trackers, and do not sell or share your data with advertisers.

Every major browser lets you view and delete cookies and local storage, and block them per site. Blocking the strictly necessary cookies will stop sign-in working — the rest of the site will still read.

Questions about any of this: privacy@be-outside.app. Be Outside is a product of ASHER LABS LTD, company no. 17085554, registered in England and Wales.