Cookie Policy
The cookies and local storage we use for sign-in, preferences, security, and privacy-friendly analytics — and how to control them.
Last updated: September 11, 2026
1. How we use cookies
We use a small set of cookies and local-storage entries to keep you signed in, remember your theme, keep the site secure, and understand aggregate usage. There are no third-party advertising cookies and no sale of cookie data. Where consent is required (notably in the EU/UK), non-essential storage is only set after you consent — essential storage described below is always on because the site cannot function without it.
2. Categories
| Category | Examples | Basis / consent |
|---|---|---|
| Strictly necessary | Clerk session (__session, __clerk_*), auth handshake, load-balancing and security cookies | Always active — required for sign-in and security |
| Preferences | Theme (next-themes), docs filters, UI state | Always active — set from your own choices |
| Analytics (privacy-conscious) | Vercel Analytics and Speed Insights aggregates | Legitimate interests; no ad profiling. Honors available consent signals where enforced |
| Media delivery | CDN cache and bandwidth optimization for demo videos | Always active while media loads |
Exact cookie names and lifetimes rotate for security (Clerk and Vercel manage theirs). Session cookies typically expire when you sign out or after inactivity; preference values persist on your device until you clear them; analytics aggregates are retained 12–24 months on a rolling basis.
3. What we do not do
- No third-party ad trackers, data brokers, or fingerprinting.
- No sale of personal information and no cross-context behavioral advertising.
- No marketing cookie is set — we do not run email or ad remarketing today.
4. Managing cookies
- Browser controls: block or delete cookies in Chrome, Safari, Firefox, or Edge settings. Blocking strictly necessary cookies will sign you out and break saved boards and Pro access.
- Banner choice: use the footer "Cookie settings" button to reopen the banner and switch analytics on or off at any time.
- Do Not Track / GPC: we do not process DNT as a consent mechanism beyond what the browser already blocks, but we support Global Privacy Control signals to opt out of any sale or sharing — which does not occur in any case.
- Theme and local data: clearing site data resets theme and UI preferences without affecting server-side boards tied to your account.
5. Consent in the EU/UK
Where the ePrivacy Directive applies, we rely on the "strictly necessary" exemption for auth, security, and your-explicitly-requested preferences. Analytics storage is opt-in through the cookie banner shown on your first visit — your selection is remembered on your device, and you can change it at any time from the footer "Cookie settings" button. Contact thommysart@gmail.com with any cookie question.
6. Updates
Providers change cookie names over time, so this page describes categories and purposes rather than an exhaustive name list. We update the date above when practices change. See also our Privacy Policy for broader data practices.
Questions about this page? Contact thommysart@gmail.com. This content is provided for transparency and is not legal advice. It will be reviewed by counsel as the product grows.