Cookie Policy

Reading the public pages sets no cookies at all.

Login cookie (__Host-authjs.session-token). Keeps you logged in. It holds a random code and nothing about you. Scripts on the page cannot read it. It ends after 7 days without a visit, and always after 30 days.

Sign-in cookies (__Host-authjs.state, __Host-authjs.pkce.code_verifier, __Host-authjs.callback-url, __Host-authjs.csrf-token). They stop someone else from starting or taking over a login in your name, and they remember which page to send you back to. The first two are removed when the login finishes, or after 15 minutes. The other two go when you close your browser. Scripts on the page cannot read any of them.

If you arrived through someone’s invite link, no extra cookie is set for that. The address you are sent back to after adding the bot carries a code for who invited you, so they get credit. It is kept in the sign-in cookie that remembers that address.

The payment form is provided by Stripe. When it loads, Stripe sets two cookies (__stripe_mid and __stripe_sid) that help it spot fraudulent payments. They are only set on the checkout page. We never see your card details.

The two videos on the Guides page come from YouTube, which is run by Google. Nothing is loaded from YouTube when you open the page: you see a picture of ours and a play button.

When you press play, the video loads from YouTube’s “no cookie” player (youtube-nocookie.com). From then on your browser is talking to YouTube. It learns your IP address and which video you opened, and it may keep its own information in your browser. What YouTube does with that is covered by Google’s privacy policy, not this one.

While you are logged in, the site keeps a few small notes in your browser’s own storage. They are not cookies and they are never sent to us: the time your login was last renewed, changes to settings that you have typed but not saved yet, which setup steps you have already seen, and that you closed a reminder about a purchase you started.

Unsaved changes and seen steps go when you close the tab. Clearing your browser’s site data removes all of it.

No advertising cookies, no social-media trackers and no third-party analytics. We count things like “how many servers finished setup this week” on our own servers, without cookies, using codes that cannot be turned back into a person or a server.

Every cookie above is needed for something you asked the site to do, so there is no cookie banner: there is nothing optional to switch off.

Logging out removes the login cookie. “Log out everywhere” on your Account page ends every login on every device. You can also clear cookies in your browser’s settings at any time.