Legal
Cookie policy
This is the entire cookie story, and it is short because there is no tracking to disclose.
Effective September 14, 2026
1. Cookies we set
Two, both strictly functional:
- A session cookie that keeps you signed in to your account. Signed, HTTP-only, and capped at 30 days.
- A CSRF protection cookie that defends forms against cross-site request forgery.
2. Cookies we do not set
No analytics cookies, no advertising cookies, no cross-site tracking pixels, no fingerprinting, and no third-party cookies of any kind. This is also why there is no cookie consent banner: nothing we set requires one.
3. Third parties
If you upgrade to a paid plan, Stripe's checkout pages set their own cookies under Stripe's policy. Our pages do not include third-party trackers.
4. Managing cookies
You can clear or block cookies in your browser at any time. Blocking the session cookie signs you out; everything public on the site keeps working.