What we use cookies for
The app uses minimal cookies and localStorage:
- Essential — auth session, theme preference, last-visited page. These cannot be disabled; without them you cannot log in.
- Analytics (optional) — Plausible page views (no IP, no fingerprint, no cross-site tracking). Default: declined until you accept.
- Functional (optional) — preferred locale, dismissed banners, completed-tour flags. Default: declined until you accept.
How to manage your choice
- Cookie banner — appears on first visit. Click "Manage" to choose individually, or "Accept all" / "Reject all".
- Change later — Profile → Privacy → Cookie preferences. Toggle individual categories on or off.
- Withdraw consent — same place. We'll stop firing the corresponding events immediately.
What declining means in practice
- Decline Analytics — we won't fire any Plausible events from your sessions. We won't see your activity in our aggregate dashboards. The product still works fully.
- Decline Functional — your preferences won't persist across sessions (e.g., locale resets to default). The product still works.
What we don't do
- We don't use Google Analytics, Facebook Pixel, or any third-party advertising trackers.
- We don't fingerprint your device or attempt to identify you across sites.
- We don't sell, share, or rent any data to third parties — including aggregated analytics data.
What our analytics provider sees
Plausible (our analytics tool) is a privacy-focused European service. They get:
- Page URL (without query strings or fragments)
- Anonymized country (derived from IP at request time, then discarded)
- Browser + OS family (Chrome 120 / iOS 17, etc.)
- Referring site (where you came from)
They do NOT receive your username, email, IP address, or any account data. They do not set cross-site cookies.
More details
Full policy: Privacy Policy. Implementation details: docs/analytics-privacy-statement.md (engineering doc).
Last reviewed: 2026-05-04