Cookie policy
The cookies SafeOrNah sets, only those the site needs to work, and how to turn off the anonymous statistics.
In short
SafeOrNah only uses the cookies it needs to work, for your session, form security, your sign-in, your theme and your language.
No advertising cookie, no statistics cookie, no tracker from another site. That is why there is no consent banner.
Visit statistics are counted by our own server, without cookies, and you can turn them off at the bottom of this page.
The cookies
safeornah-session keeps your session, meaning your sign-in and, for a visitor, the name of the analyzed file. It expires after 2 hours without activity, and the JavaScript of the pages cannot read it.
XSRF-TOKEN protects the forms against requests sent from another site (CSRF). It expires after 2 hours without activity.
remember_web_59ba36addc2b2f9401580f014c7f58ea4e30989d keeps you signed in from one visit to the next, for 400 days. It is not set for team accounts (admins and moderators).
theme remembers your theme (light, dark or the one of your system). It lasts 1 year.
locale remembers the language you chose. It lasts 1 year.
The first three are encrypted. theme and locale only hold your choice, and when you are signed in, the theme and language of your account come first.
Browser storage
safeornah:banner-closed, in the session storage of the tab (sessionStorage), remembers the version of the announcement banner you closed. It disappears when you close the tab.
historyKey and historyIv, in the same session storage, encrypt the pages your browser keeps for its Back button, so that nobody can read them once you are signed out. They disappear when you sign out or close the tab.
safeornah:analytics-disabled, in the local storage of the browser (localStorage), remembers that you turned the anonymous statistics off. It stays until you turn them back on.
safeornah:install-dismissed, in the same local storage, remembers for 30 days that you declined to install the app on your phone, so we do not ask again.
If your browser allows it, the site also installs a small program (a service worker) and keeps a copy of the "No connection" page. It keeps none of your pages and none of your data.
safeornah:seen, in local storage, holds the date of your first visit. It only says that a visit already took place from this browser, to tell new visits from returning ones. It holds no identifier and the server only receives "new" or "returning". Later visits do not extend it, it expires after 13 months, and it is erased as soon as you turn the statistics off. It is the only item kept on your device that serves the statistics alone.
The admin interface, reserved for the team, also keeps its theme (filament:theme:mode) in the local storage of the browser.
If you allow notifications to be told when an analysis ends, your browser is the one that remembers this permission, and you can take it back in its settings.
Other sites
When you sign in, you go through Google, Apple, Microsoft or GitHub, which set their own cookies on their site. The profile pictures from Google and GitHub are loaded from their servers.
SafeOrNah loads no script and no font from another site.
Audience measurement
SafeOrNah counts its visits itself, without any third-party service and without cookies. We only get totals per day, and no line can lead back to a person or their path. The list of what is counted is in the privacy policy.
Nothing is counted from your browser if you turn off the "Anonymous statistics" switch at the bottom of this page. The "Do Not Track" and "Global Privacy Control" signals do not turn it off: use this switch. With an account, this choice is kept in your settings and applies on all your browsers.
Deleting cookies
You can delete them in the settings of your browser. Without the session cookie and the sign-in cookie, you are signed out. Without theme and locale, the site goes back to the theme of your system and the language of your browser.
More details about your data in the privacy policy.