Legal
Cookie policy
The few cookies we set, what each one does, how long it lasts, and why none of them is for advertising.
- Version
- draft-0
- Last updated
What we set
We set only first-party cookies that the service needs, and no third-party advertising or tracking cookies. The security check on some forms is provided by Cloudflare Turnstile, which may set its own cookie to tell people from bots.
| Cookie | Purpose | Lifetime |
|---|---|---|
| Session | Keeps you signed in to your account | Until you log out or the session ends |
__Host-csrf | Protects your requests against cross-site forgery | Session |
promo | Remembers a discount or referral code from a link, so checkout can fill it in | 7 days |
vid | A random visitor ID, so a purchase can be credited to the partner whose link you followed | 400 days |
ref | The partner link you followed, signed so it cannot be altered | 30 days, or the partner plan's window |
Your colour theme and similar display choices are kept in your browser's local storage, not in a cookie, and are never sent to us.
Partner and referral cookies
vid, ref and promo are set only when you open a partner link (/r/…) or a link that carries a code. They hold
no name, email or payment detail. Where the law requires consent for them, we ask before setting vid and ref; a
code in the link still applies without them.
Turning cookies off
You can block or delete cookies in your browser. Without the session and security cookies you cannot sign in or buy. Without the others, links and codes are not remembered, and nothing else changes.
Changes
A new version of this policy is published here with its date. The change log below lists every version.
Change log
- draft-0First draft, written for counsel review.