Last updated: September 25, 2026
The short answer
- This website sets no cookies. It loads nothing from any other company, and runs no analytics, advertising, social media or tracking code.
- The grewray app sets one cookie, and only once you sign in. It is strictly necessary, it keeps you signed in, and it is described in full below.
The one cookie the app uses
- Name
- grewray_refresh
- Set by
- The grewray app's own servers (first party)
- Purpose
- Keeps you signed in securely, by renewing your session without asking for your password again.
- Category
- Strictly necessary: the app cannot keep you signed in without it
- Lifetime
- Up to 30 days, renewed as you use the app, and removed when you sign out
- Protections
- HttpOnly (no script can read it), Secure (sent only over an encrypted connection), SameSite Strict (never sent from another site), and limited to the sign-in path /api/auth
Other storage in your browser
The app stores nothing in your browser's local or session storage. The short-lived key that proves who you are while you work is held in memory only, and disappears when you close the tab. The free tools and the interactive demo on this website keep what you type in the page itself and forget it when you leave.
The bot check on sign-up
The sign-up and password-reset forms use Cloudflare Turnstile to tell people from automated scripts. It runs in a frame served by Cloudflare, which reads technical signals from your browser for that check alone. It is not used for advertising or to follow you across websites, and what Cloudflare processes is described in its own privacy policy.
Why there is no cookie banner
A strictly necessary cookie does not need consent under the laws that govern cookies, and this website sets none at all, so there is nothing to ask you. If we ever add an optional cookie or analytics, we will ask first, with a choice as easy to refuse as to accept, and update this policy and our consent notice before we do.
Controlling cookies
Every browser lets you see, block and delete cookies. If you block the sign-in cookie, the app cannot keep you signed in, and you will be asked to sign in again whenever your session ends.