Cookie Policy
Last updated: 10 June 2026
This is every cookie Notdown sets, why we set it, and how long it sticks around. Notdown uses the minimum number of cookies needed to make the service work. No analytics cookies. No advertising cookies. No third-party trackers loaded on this site.
That's not a future plan or a "we're working on it" — that's how it is today.
What's a cookie?
A small text file your browser stores on a website's behalf and sends back on every subsequent request, so the site can recognize you between page loads.
Cookies we set
All cookies below are strictly necessary for the service to work. They're first-party, HttpOnly, Secure, and
use SameSite=Lax.
| Name | Purpose | Lifetime |
|---|---|---|
| notdown_session | Keeps you signed in across page loads. Encrypted server-side, no PII inside the cookie itself. | 2 hours idle, or 30 days if you tick "Remember me" |
| XSRF-TOKEN | CSRF protection. Required for any form submission or Livewire action. | Browser session |
| remember_web_* | Only if you tick "Remember me" at login. Lets you stay signed in across browser restarts. | 30 days |
What we don't set
- No Google Analytics, Plausible, Fathom, or any other analytics cookie.
- No advertising cookies (Facebook Pixel, Google Ads, anything similar).
- No third-party social-media widgets.
- No fingerprinting or behavioral tracking.
Server-side request logs (IP, user agent, timestamp) are retained for 30 days for security and debugging — see the Privacy Policy.
Third-party services
Notdown currently loads no third-party scripts inside the dashboard or the marketing site. If that changes — for example, a hosted payment checkout when paid plans launch — this section will be updated, and any cookies set on a third-party domain will be governed by that party's policy.
Consent
Because every cookie we set is strictly necessary, no consent banner appears. Under the ePrivacy Directive and GDPR, strictly necessary cookies don't require consent. If your browser blocks cookies entirely, you won't be able to sign in or submit forms.
Managing cookies
Clear or block cookies any time from your browser settings. Doing so signs you out and you'll need to log in again on your next visit.
Changes
If we ever add a non-essential cookie (no current plans), this page will be updated and a consent banner will appear before the cookie is set.
Contact
Cookie questions: privacy@notdown.dev