Cookies
Short version: one cookie, strictly necessary, no tracking, therefore no banner.
The one cookie
Signing in sets exactly one cookie. It holds a signed session token and exists only so the next request knows who you are. It is HttpOnly, Secure and SameSite=Lax, and expires after 30 days. Signing out deletes it immediately.
Why there is no banner
Under § 25(2) of the German TDDDG, no consent is needed for storage that is strictly necessary to provide a service the user explicitly requested. A sign-in cookie is exactly that. A banner asking permission for something that has to be set anyway informs nobody — it only trains everyone to click it away.
What is not set
No analytics cookies, no advertising cookies, no third-party cookies, no fingerprinting, no tracking pixels. No external scripts are loaded, with one exception: the checkout page loads Paddle's script, which is required to take the payment and is covered by Paddle's own privacy policy.
- No Google Analytics or anything like it
- No social media plugins
- No advertising networks
- No externally hosted fonts
Local storage
If you enable notifications, the browser also stores a push subscription. That is not a cookie and is not sent to any other server; it goes away when you turn notifications off.
Last updated 24 August 2026. This is a courtesy translation; the German version is the binding one.