Cookie Policy
This site sets exactly one cookie, and only after you sign in. There is no tracking here, which is why there is no consent banner asking you to accept anything.
1. The one cookie we set
| Name | sf_session |
|---|---|
| Purpose | Keeps you signed in. Holds a random session token and nothing else — no email, no name, no personal data. |
| When | Only after you complete a Google sign-in. Signed-out visitors get no cookies at all. |
| Lifetime | 30 days, or until you sign out or delete your account. |
| Flags | HttpOnly (scripts cannot read it), Secure (HTTPS only), SameSite=Lax. |
| Type | Strictly necessary. Without it there is no way to stay signed in. |
2. What we do not set
No analytics cookies. No advertising or retargeting pixels. No social media trackers. No session recorders or heatmaps. No cross-site identifiers. We do not run Google Analytics or any equivalent, so there is nothing to opt out of.
3. Browser storage
The browser-based tools (tint and red-eye) may keep small preferences such as your last chosen colour in your browser's local storage. That never leaves your device and is not readable by us.
4. Third parties
Signing in redirects you to Google, which sets its own cookies on its own domain under its privacy policy. When paid plans open, the checkout will be hosted by Stripe, which does the same. Neither is under our control.
5. Removing it
Sign out, or clear cookies for this site in your browser. Either way you will simply be signed out; nothing else breaks.