Skip to content
grewray
grewray

Cookie policy

This website sets no cookies. The grewray app uses one, to keep you signed in. Here is exactly what it does.

Last updated: September 25, 2026

The short answer

  • This website sets no cookies. It loads nothing from any other company, and runs no analytics, advertising, social media or tracking code.
  • The grewray app sets one cookie, and only once you sign in. It is strictly necessary, it keeps you signed in, and it is described in full below.
Name
grewray_refresh
Set by
The grewray app's own servers (first party)
Purpose
Keeps you signed in securely, by renewing your session without asking for your password again.
Category
Strictly necessary: the app cannot keep you signed in without it
Lifetime
Up to 30 days, renewed as you use the app, and removed when you sign out
Protections
HttpOnly (no script can read it), Secure (sent only over an encrypted connection), SameSite Strict (never sent from another site), and limited to the sign-in path /api/auth

Other storage in your browser

The app stores nothing in your browser's local or session storage. The short-lived key that proves who you are while you work is held in memory only, and disappears when you close the tab. The free tools and the interactive demo on this website keep what you type in the page itself and forget it when you leave.

The bot check on sign-up

The sign-up and password-reset forms use Cloudflare Turnstile to tell people from automated scripts. It runs in a frame served by Cloudflare, which reads technical signals from your browser for that check alone. It is not used for advertising or to follow you across websites, and what Cloudflare processes is described in its own privacy policy.

A strictly necessary cookie does not need consent under the laws that govern cookies, and this website sets none at all, so there is nothing to ask you. If we ever add an optional cookie or analytics, we will ask first, with a choice as easy to refuse as to accept, and update this policy and our consent notice before we do.

Controlling cookies

Every browser lets you see, block and delete cookies. If you block the sign-in cookie, the app cannot keep you signed in, and you will be asked to sign in again whenever your session ends.