Cookie policy
Last updated 2026-05-25
Short version: we don't use tracking cookies. The site uses two pieces of client-side storage, both first-party and both strictly functional.
What we store
| Name | Where | Purpose | Retention |
|---|---|---|---|
| api_key | localStorage | Holds your API key so the dashboard can make authed requests on your behalf | Until you sign out or clear browser data |
| theme | localStorage | Remembers your color-scheme preference (we ship one — cyber dark — but the slot exists) | Persists across sessions |
What we do NOT use
- · No Google Analytics, Mixpanel, Amplitude, Segment, Heap, or similar
- · No Facebook pixel, Twitter pixel, LinkedIn Insight, TikTok pixel
- · No third-party advertising cookies of any kind
- · No Hotjar, Fullstory, LogRocket, or session replay
- · No cross-site tracking
No banner needed
Because both items are strictly necessary for the dashboard to work, GDPR and ePrivacy do not require us to show a consent banner. If you don't want them set, simply don't sign in.
Removing
Click Sign out in the dashboard to clear api_key. Use your browser's "clear site data" for everything.
Questions? support@sybilshield.org