Cookies
This page is short, because the answer is short.
We use one cookie
| Name | What it is for | How long |
|---|---|---|
session_id |
Keeps you signed in from one page to the next | Until you sign out |
It holds a signed reference to a sign-in record, not your account details. Ending a session removes that record, so the cookie stops meaning anything whether or not your browser has thrown it away yet.
It is marked HttpOnly, so no script can read it, and SameSite=Lax, so another
site cannot make your browser use it. In production the whole application is
served over HTTPS and the cookie is never sent any other way.
That is the whole list
There is no analytics, no advertising, and no third-party script on any page of this application. Nothing here follows you anywhere else, and there is nothing to opt out of — which is why you were not shown a banner asking.
Things that are not cookies
Your theme is stored on your account rather than in your browser, so it follows you between machines. Which folders you have open in the sidebar is stored the same way, per person, so collapsing one does not collapse it for anybody else.
Neither of those is readable by any other site.
Questions
[PRIVACY_EMAIL].
Last updated August 20, 2026.