Cookie Policy
Last updated:
We set no cookies. This page exists because people look for it, and because the two localStorage values we do set deserve the same disclosure.
This document was prepared by the operator of this site and is not legal advice. If you are relying on it for a compliance decision, have a qualified lawyer in your jurisdiction review it.
1. Cookies we set
None. The Service does not set any cookie — not first-party, not third-party, not session, not persistent, not advertising, not analytics.
2. Why we use localStorage instead
Two preferences need to survive a page reload: your language, and your advertising choice. We store both in localStorage.
This is not a cosmetic distinction. A cookie is attached to every subsequent HTTP request to the domain, which means it is visible to intermediaries, to any third-party resource loaded on the page, and to logs. A localStorage value is readable only by script running on this origin, and is never transmitted.
For a product whose central promise is that nothing leaves your machine, using a mechanism that attaches data to every request would undermine the promise for no benefit.
3. What is stored
Neither value is transmitted to us. Both are readable only by this origin. Both can be cleared at any time from your browser's site-data settings, and the advertising preference can be changed from within the application.
| Key | Value | Set when | Lifetime |
|---|---|---|---|
cb.locale | A language tag, e.g. vi | You choose a language from the switcher | Until you clear it |
cb.consent | Your advertising choice and a timestamp | You accept or decline advertising | 365 days, then re-asked |
4. Third-party cookies
Cloudflare, which hosts the Service, may set cookies necessary for the security and operation of its network. Those are governed by Cloudflare's own cookie and privacy policies and are outside our control.
If advertising is ever enabled and you opt in, the advertising provider may set its own cookies or storage. We will name the provider, describe what it stores, and amend this Policy *before* enabling it. At the time of writing no advertising provider is enabled, and our Content-Security-Policy permits no advertising origin.
5. How to control storage
Every major browser lets you inspect and delete site data: look for "Site settings" or "Privacy" and find the entry for this domain. Clearing it resets both preferences.
Blocking all site data will not break the Service. You will be asked your language preference again on each visit, and advertising — if it were ever enabled — would be treated as declined.
Note that browser-level tracking protection, including Safari's Intelligent Tracking Prevention and Firefox's Enhanced Tracking Protection, does not affect the Service, because there is nothing to protect you from.
6. Do Not Track and Global Privacy Control
We honour both. If your browser sends a DNT: 1 header or a Sec-GPC: 1 header, advertising is treated as declined regardless of any stored preference, and the opt-in prompt is not shown.
This is enforced in code, and the check is listed in our security documentation so you can verify it.