Cookies, all one of them.
The short version
- We set one cookie, and only after you sign in. It keeps you signed in.
- No analytics, no advertising, no social buttons, no third-party scripts, so no consent banner is needed.
- Signing out or deleting your account removes it.
What we set
| Cookie | What it does | Lasts | Type |
|---|---|---|---|
cs.session_token (shown as __Secure-cs.session_token in your browser) | Proves it's you on this phone after you've entered the code we texted. Marked HttpOnly and Secure so scripts and other sites can't read it. | 14 days, refreshed once a day while you use the app. Gone when you sign out. | Strictly necessary |
"Strictly necessary" is the legal category (Privacy and Electronic Communications Regulations, regulation 6) for cookies a service can't work without. They don't need your consent, which is why you didn't see a banner. If we ever add a cookie that isn't strictly necessary, you'll be asked first.
What else the browser stores
If you install Clean Sheets to your home screen, your browser keeps a copy of the landing page, the blog and your own tick screen so they open offline. That's a cache, not a cookie, and it holds nothing about anyone else. Clearing site data in your browser removes it.
What we don't do
- No Google Analytics, Meta Pixel, Hotjar or anything of that kind.
- No advertising or retargeting cookies.
- No embedded social media buttons or third-party fonts. Fonts are served from our own domain.
- No fingerprinting.
Questions
Anything unclear, ask: admin@flexgroup.dev. The full picture of what we hold is on the privacy page.