Cookie Policy
rickub uses the smallest possible set of cookies: the ones that sign you in, and — only if you accept — one that counts your visit. No advertising cookies, no third-party trackers, nothing that follows you to another site. Never gonna track you around the web.
1. Cookies we set
| Cookie | Purpose | Type |
|---|---|---|
| Session cookie | Keeps you signed in after login. Secure, HttpOnly, SameSite. | Strictly necessary |
| CSRF token | Protects forms against cross-site request forgery. | Strictly necessary |
| Theme preference | Remembers your light/dark choice. Stored locally in your browser. | Functional (first-party) |
| Analytics cookie | Set only after you accept in the banner. It holds a random id so a return visit is counted as the same visitor instead of a new one. First-party (rickub.com only), never shared with an advertising network. Decline, or clear it, and it is gone. If you have switched product analytics off in Settings → Privacy & data, it is never set and you are not asked. | Analytics — consent required |
2. Why we ask
Under the ePrivacy rules, strictly-necessary cookies do not require consent — the session and CSRF cookies are placed without asking, because signing in does not work without them. The analytics cookie is different: it is not necessary to run the service, so we ask first and set nothing until you accept. Declining is a normal outcome, remembered, and never re-asked.
3. What the analytics cookie is not
It is not an advertising identifier, it is not shared with an ad network, and it is not readable by any other site. It carries a random id — not your handle, not your email — and the product analytics behind it is hosted in the EU. We do not build advertising profiles and we do not sell anything about you.
4. Managing cookies
Declining in the banner is remembered in this browser. If you are signed in, that same choice is recorded on your account, in Settings → Privacy & data, where you can change it at any time — so the banner and the setting never tell you two different things. Switching it off there also stops the pseudonymous product events our servers send about your account.
You can clear or block cookies in your browser settings, but signing in will not work without the session and CSRF cookies. Questions: privacy@rickub.com.