Legal
Cookies & Tracking
Most cookie policies exist to explain a long list of trackers. This one exists to explain an empty list — and to tell you how to confirm it rather than take our word for it.
Last updated October 10, 2026 · Effective October 10, 2026
1. The short version
This site sets no cookies. Not analytics cookies, not advertising cookies, not “strictly necessary” cookies. Nothing is written to your browser that identifies you, and nothing follows you to another site.
2. Why there is no consent banner
Under the EU ePrivacy Directive and the UK PECR, consent is required to store or access information on your device. We do neither, so there is nothing to ask you about. A banner that asked for consent we do not need would be theater.
If that ever changes — if we add a tool that genuinely needs storage — a real consent mechanism will appear before it loads, not after, and this page will say so.
3. How we count visits
We use Cloudflare Web Analytics, which is cookieless by design. It records aggregate counts — page views, referring site, country, and device type — with no identifier that can be linked back to you, and no profile built over time.
This means our analytics cannot tell us that the same person visited twice. That is a deliberate trade: we lose a little insight and you keep your privacy intact.
- No cookies, no device fingerprinting, no cross-site identifiers.
- No data sold, shared, or used for advertising.
- Nothing that would let us or the provider single you out.
4. Local storage and fonts
The site does not use localStorage, sessionStorage, or IndexedDB. Web fonts are served from this domain rather than from a third-party font host, so loading a page does not reveal your IP address to anyone else.
The one exception is if we enable a spam check on our forms. It may set a short-lived token while you submit a form, purely to tell a person from a bot. It never profiles you or tracks you across sites, and it only runs on pages with a form.
5. Server logs
Our host keeps standard request logs — IP address, timestamp, the path requested, and browser type — for up to 30 days, to block abuse and diagnose outages. These are not cookies and are not used to build any profile of you.
6. How to verify this yourself
Please do not take our word for it. Open your browser’s developer tools, go to the Application or Storage tab, and look under Cookies for this domain. You should see an empty list. The Network tab will show you every request the page makes.
If you find something there that this page does not explain, that is a bug and we want to know. Email partner@hodenote.com.