Cookie Policy
Version 2026-09-04
This is a generic template a product customizes before launch — not reviewed legal advice for any specific jurisdiction, business or product.
This product sets exactly one cookie: the session cookie created when you sign in. There is no cookie-consent banner, and this page explains why that is correct rather than an oversight.
1. The one cookie this product sets
When you sign in, the product sets a single, strictly-necessary session cookie that identifies your signed-in session to the server on each request. It is not readable by client-side JavaScript, is not used to track you across other sites, and carries no advertising or analytics identifier.
2. Why there is no banner
Under ePrivacy/GDPR guidance, a cookie that is strictly necessary to provide a service you explicitly requested — staying signed in after you sign in — does not require consent, and therefore does not require a banner asking for it. Showing one anyway would ask you to consent to something that needs no consent, train you to click through banners without reading them, and add friction for no protection gained. If this product ever adds a cookie that is not strictly necessary — analytics or advertising, for example — that cookie is not shipped by default: it ships only once it is deliberately enabled, and only alongside the consent mechanism it would then require.
3. What the session cookie is not used for
The session cookie is not used to:
- Track you across other websites.
- Build an advertising profile.
- Share data with third-party ad networks.
4. Controlling it
You can clear this cookie at any time by signing out, or by clearing your browser's cookies for this site — either will end your session and require signing in again.
5. Changes to this policy
A meaningful change — most notably, this product starting to set a cookie that is not strictly necessary — bumps the version shown above and re-prompts you to accept it the next time you sign in.