Cookies.
What we store on your device. Spoiler: almost nothing.
Last updated · May 28, 2026
The short version: we use one essential auth cookie. No tracking, no advertising, no third-party cookies. Analytics is anonymous and cookieless.
What is a cookie?
A cookie is a small text file stored on your device by a website. Cookies are often used to keep you logged in, remember preferences, or track behavior across sites.
Under the EU ePrivacy Directive and § 25 TTDSG, non-essential cookies require your explicit consent before being placed. Essential cookies do not.
Cookies we use
Essential — no consent required
- sb-access-token / sb-refresh-token — Supabase Auth session. HttpOnly, Secure, SameSite=Lax. Expires when you log out or after 7 days of inactivity.
- pinning-consent — remembers your cookie preferences. 12 months.
Functional — only with consent
- pinning-theme — saves your light/dark preference (default: dark). We currently store this in localStorage, not a cookie.
Analytics — cookieless
We use Plausible Analytics, which is GDPR-compliant by design and uses no cookies. Aggregated, anonymized page-view data only. No personal identifiers, no cross-site tracking, no fingerprinting.
Marketing
We don't use marketing or advertising cookies. We have no advertising partners.
Third-party services
Some pages load resources from third parties:
- Stripe — only on /pricing checkout and account billing pages, for fraud prevention
- Google Fonts — fonts loaded from Vercel CDN (self-hosted), no requests to Google
Managing your preferences
You can clear cookies from your browser at any time. Doing so will log you out and reset preferences. Most browsers also support "Do Not Track" signals, which we honor by not loading any optional analytics.
Contact
Questions: privacy@pinning.info