Cookies

Last updated: October 26, 2026

The only cookie we set

• Session cookie: set when you sign in, cleared when you sign out. Lets the backend recognise you between requests.

That's why there is no cookie banner: there is nothing optional to accept.

Analytics without cookies

We count page views with Cloudflare Web Analytics, the privacy-first analytics from the network that already serves this site. It sets no cookies, uses no local storage, does not fingerprint your browser and does not track you across sites. We see totals like page views, referrers and countries, never individual visitors.

We also use Umami, a cookieless, open-source analytics tool, to count a few anonymous steps such as "clicked a plan", "signed up" or "finished an upload". It helps us see where people get stuck. It stores no cookies, sends no email addresses, file names, CIDs or API keys, and strips everything from page addresses except campaign tags like utm_source.

What we don't use

• No Google Analytics
• No Hotjar, FullStory, LogRocket, or session replay
• No Facebook Pixel, Google Ads, or marketing trackers
• No Segment, RudderStack, or first-party-tracker frameworks
• No third-party fonts (fonts are self-hosted via Next.js)
• No third-party comment widgets, chat embeds, or social plugins

Privacy is the baseline.

Sign out of your account to clear the session cookie.