Legal
Cookies
Last updated 29 April 2026
Short version: we set one cookie, only after you sign in, only to keep you signed in. It's strictly necessary, so we don't need to ask for consent under UK GDPR / PECR.
Our session cookie
When you sign in we set a single session cookie used to keep you signed in. It is encrypted, only readable by our server, and is cleared automatically when you sign out or delete your account.
What we don't set
- No analytics cookies.
- No advertising cookies.
- No third-party trackers.
- No fingerprinting or device identifiers.
Because the only cookie we set is strictly necessary for the service to work, no consent banner is required under UK PECR / ICO guidance.
Cookies set by our payment processor
When you go through checkout or visit the billing portal, you are redirected to our payment processor's own domain. They may set their own cookies on those pages, governed by their privacy policy (linked from our processors page).
Updates to this notice
If we ever introduce a new cookie (for example for analytics) we'll update this page and ask for consent before setting it.