Draft for legal review. This document describes how the product works today and is pending review by counsel before launch. It is not yet a final legal agreement.
Cookie policy
The few cookies and storage we use, and why.
Last updated October 22, 2026
We use a small number of cookies and browser storage, mostly to keep you signed in and secure.
Strictly necessary
| Name / type | Purpose | Duration |
|---|---|---|
Session cookies (prefixed fp.) | Keep you signed in; HTTP-only and secure | Up to 30 days |
Workspace cookie (fp_ws) | Remember which workspace you last used | Persistent (cleared on sign-out or by your browser) |
| Cloudflare Turnstile | Bot protection on sign-up, sign-in and forms | Session |
| Payment provider cookies | Set by Stripe or PayPal on their checkout pages | Set by the provider |
Preferences
| Name / type | Purpose |
|---|---|
| Theme (local storage) | Remember light, dark or system theme |
| Editor recovery copy (browser storage) | Keep unsaved edits on your device if your connection or browser fails |
Analytics
We use PostHog to see which pages and features are used, so we can improve them. Analytics are anonymous: we don't link them to your name or email, and they never include project content, text you type or what's on the editor canvas (we don't record sessions).
| Name / type | Purpose | Duration |
|---|---|---|
| None while signed out | Visits are counted without storing anything on your device | — |
PostHog identifier (local storage, ph_…_posthog) | Signed in with Help improve the product on: a random identifier so repeat visits are counted | Until you clear site data |
Turn analytics off in your profile privacy settings. We also honour your browser's Do Not Track and Global Privacy Control signals. Where the law requires consent for analytics, we'll ask first.
Advertising
We don't use advertising or cross-site tracking cookies.
Managing cookies
You can clear cookies in your browser settings. Blocking strictly necessary cookies will prevent signing in.