Skip to content

Cookie notice

What is stored in your browser, and why.

DRAFT - not legally reviewed. This text must be reviewed by qualified legal counsel before public launch.

In short

We use only first-party cookies and browser storage that are strictly necessary to provide the service you asked for or to remember a display choice you made. There are no analytics, advertising or tracking scripts and no third-party cookies. Fonts are bundled with the site at build time, so your browser makes no request to a font provider.

What is stored

NameTypePurposePartyLifetime
auth_tokenCookie (httpOnly)Keeps you signed in. Scripts cannot read it; it matches a server-side session record.First-party7 days
mfa_challengeCookie (httpOnly)Carries you through the second step of two-step sign-in.First-partyA few minutes
cc_themeCookieRemembers your light/dark display choice.First-party1 year
cc_sidebarCookieRemembers whether the sidebar is collapsed.First-party1 year
opertunity.onboarding.dismissedlocalStorageRemembers that you dismissed the onboarding guide.First-partyUntil you clear browser data
cc_palette_recentlocalStorageRemembers recent items in the command palette.First-partyUntil you clear browser data

Legal basis

These cookies and storage entries are strictly necessary to provide the service you asked for, or store a setting you chose. Under Art. 5(3) of the EU ePrivacy Directive (as implemented in member states) and Regulation 6 of the UK PECR, no consent is required for them, so we show no consent banner. Any personal data involved is processed under Art. 6(1)(b) GDPR (providing the service) and, for display preferences, Art. 6(1)(f) GDPR (our interest in a usable interface).

How to delete them

Signing out ends the session and removes the sign-in cookie. You can remove all cookies and local storage at any time in your browser's settings (usually under Privacy or Site data). Deleting the sign-in cookie signs you out; deleting the preference entries only resets your display choices.

More information

See the Privacy Policy for how personal data is handled.