Cookie Policy
Last updated 22 September 2026
Short, because the list is short.
1. Strictly necessary
lg_session— keeps you signed in. HttpOnly, SameSite=Lax, and Secure when served over HTTPS, so it cannot be read by page scripts. Expires when the session does. Set only after you sign in; nobody who never logs in receives it. No consent is required for this one, and the platform does not work without it.
2. What is deliberately absent
- No analytics of any kind — no Google Analytics, Plausible, Matomo, Segment or Mixpanel.
- No session replay. Your screen, mouse movements and keystrokes are not recorded. No Hotjar, Clarity, FullStory, LogRocket or PostHog.
- No advertising or retargeting pixels.
- No fonts, scripts or stylesheets from a third-party CDN. Everything this page loads comes from this server, so no outside company learns your IP address because you opened the app. The one bundled library (a charting library) is served from here, not from a CDN.
3. The tracking pixel in outgoing email
Worth being explicit about, because it is the one place the platform tracks anyone: when you enable open tracking, emails you send carry a 1×1 image that records that the message was opened, and links are rewritten so clicks are counted. That happens in your recipients’ mail clients, not on this site, and it is your processing as the sender. You can switch both off in Settings → Tracking. The unsubscribe link is not switchable and always stays.
4. Your preference
Because nothing optional runs here, the consent notice records a simple
acknowledgement in localStorage rather than in a cookie. Clear your
browser’s site data for this domain to reset it.