Storage & cookies
How we keep you signed in — and what we don't do.
This app uses no tracking, advertising, or analytics cookies, and no third-party cookies. The only cookies we set are the first-party ones needed to keep you signed in.
- Session cookies — when you sign in, our server sets two secure, HttpOnly cookies: a short-lived access token and a longer-lived refresh token used to renew it. Being HttpOnly, they can't be read by JavaScript, and they're only ever sent back to our own server.
- A small “signed-in” hint — a non-sensitive cookie that just tells the app you have an active session so it can show the right interface. It holds no token and no personal data.
Logging out clears these cookies. Because they exist solely to operate your session — not to track you — they are strictly necessary, so no cookie consent banner is required.