Cookies

This site uses three things, and only one of them is asked of you. There is no ad network, no social button loaded from a third-party server, and none of what follows is used to show you advertising, here or anywhere else.

cooked_session

Keeps you signed in. Strictly necessary for the service to work, so it is set without consent. Not accessible to page JavaScript, sent over HTTPS only, expires after thirty days or when you sign out.

cooked_consent

Remembers your answer to the banner, so you aren’t asked again on every page. It holds the word “granted” or the word “denied”, and nothing that identifies you. Kept for six months, whether you said yes or no. Strictly necessary too: it exists only to honour your choice.

ph_…_posthog

Set by PostHog, and only if you accepted. It holds a random ID that lets us recognize your browser from one visit to the next. Kept for a year. Refuse, and it is never written.

We measure how many people read these pages using Umami, for everyone, without asking you anything. It sets no cookie, builds no visitor ID and does not fingerprint your browser. It records the page address, the referring site, your browser family and a country derived from your IP address. The address itself is discarded, never stored. It also counts clicks on two buttons, the one that downloads the app and the one that leads to checkout, with the page and the plan involved: a total, tied to no one.

And if you agree to it, we measure how these pages are used with PostHog: which pages you go through and in what order, what you click, and a recording of your visit to this site that replays mouse movement, scrolling and clicks. That recording also carries the technical messages your browser writes during the visit, which is how we track down what broke when a page misbehaves. It is there to tell us what works in our pages and what doesn’t. The data is stored in the European Union.

This concerns the website only. The Cooked app still measures nothing: no device identifier, no usage statistics, no analytics, and none of these tools is installed in it. It downloads a small file naming the latest version at most once a day, sends nothing back with it, and you can switch that off in its settings. The two are separate, and that does not change.

Nothing is set before you answer. Until you accept, your browser doesn’t even download the measurement library, so there is no cookie, no local storage and no request to PostHog. That isn’t an intention, it’s how the site is built.

Refusing takes exactly one click, same as accepting. Both buttons in the banner are the same size, the same shape and in the same place. A refusal isn’t tucked behind a second screen or a quiet link, and the site behaves exactly the same way afterwards.

Two cookies escape that question, for one reason only: they are strictly necessary to a service you asked for. The session one exists because you signed in; the consent one exists to remember that you said no. Prior consent isn’t required for those, and cookieless audience measurement writes nothing to and reads nothing from your device, so the rule that governs storage on your equipment has nothing to apply to.

Your answer is kept for six months, then we ask again. That period is the same for yes and for no: a refusal is not forgotten sooner than an agreement.

This site had no banner for a long time, and this page used to explain why. What changed on 9 August 2026 isn’t our view of banners, it’s what we collect: recognising a visitor from one visit to the next and replaying their session is something you ask for. The rest of what we promise hasn’t moved, starting with this: we do not sell, rent or trade any data, and we will never put a feature behind sharing it.

You can change your mind at any time, from the “Cookies” button at the bottom of every page. It clears your answer and asks you again. Withdrawing consent has to be as easy as giving it, and that is where it happens.

You can also delete these cookies from your browser settings, or sign out for the session one. The only consequence is that you’ll need to request a new sign-in link to reach your account, and that the banner will ask you again.

Any browser setting or extension that blocks third-party scripts stops these measurements, and the site works exactly the same way without them.

Umami holds nothing that identifies you, so on that side there is nothing of yours to delete. For anything PostHog recorded while you had accepted, your rights of access and erasure work as they do for everything else, in the way the privacy policy sets out.