Cookies

Because there is nothing to consent to. European law requires consent before a site stores anything on your device, with one exception: storage that is strictly necessary for a service you asked for. Authentication and security tokens are the textbook case, and authentication and security tokens are all we set.

We run no analytics, no advertising, no third-party trackers and no fingerprinting. A banner asking you to accept those would be asking about things that do not exist, and the reject button would do nothing, which is worse than not asking. So you get this page and a single dismissible line the first time you visit, instead of a dialog blocking the site.

Two, both of them ours, both marked HttpOnly so no script can read them.

Two small values in local storage, which never leave your machine and are never sent to us:

Both are settings you chose, stored where you chose them. Clearing your site data removes them and costs you nothing but the choices themselves.

Searching from the landing page without an account does not set anything on your device. It does count that search against your IP address, in our own storage, so that one script cannot spend the whole day’s inference budget in a minute.

The counter is keyed by the date and expires about twenty six hours later. It records a number, not what you searched for. Because nothing is stored on your device, cookie law does not apply to it, but it is still personal data under the GDPR, so it is covered by the legitimate interests basis set out in the privacy policy.

No third party sets a cookie on this site. One does see your IP address: the signed-out pages load two typefaces from Google Fonts, and fetching a font means your browser contacts Google’s servers. That is a request, not a cookie, and we are moving the fonts onto our own domain to remove it.

If you subscribe, our payment processor sets its own cookies on its own checkout pages under its own policy. That happens on their domain, not ours.

Every browser can block or delete cookies, usually under Privacy in settings. Blocking the two above will not break the site so much as make it impossible to sign in, since staying signed in is precisely what they do.

Anything unclear here, ask privacy@bighugger.com.