Cookie Policy

Last updated: 2026-04-19

What we set

We set a small number of cookies, all first-party:

Session cookie — stores an opaque session ID so you stay logged in. Expires when you close your browser (or on logout).
CSRF token cookie — prevents cross-site request forgery on form submissions. Required for signup and checkout.
Preference cookies — remember your dashboard theme, currency, and timezone. Persistent (12 months) and user-facing (editable).

What we do NOT set

No Google Analytics.
No Facebook Pixel.
No third-party advertising cookies.
No cross-site tracking pixels.
No retargeting cookies.

Our analytics (bandwidth, conversion, top pages) run on a self-hosted, privacy-respecting tool that never leaves our infrastructure.

Controlling cookies

Disabling session and CSRF cookies will prevent login and checkout. Disabling preference cookies will reset dashboard settings on each visit. You can clear cookies at any time from your browser's privacy settings.

Do Not Track

We honor the DNT: 1 and Sec-GPC: 1 request headers. If your browser sends either, we will not load preference cookies — only the strictly-essential session and CSRF cookies.

Changes and contact

Material changes to this policy are announced 30 days in advance. Questions: [email protected].