Authfu

Privacy

Cookies and Tracking

Authfu sets one cookie and runs no analytics. This page says exactly what that cookie is for.

Last updated

01The short version

No tracking

authfu.com sets no cookies at all. The console at authfu.app sets one session cookie, and it is the thing that keeps you signed in. There is no analytics, no advertising, and no third-party script anywhere on either site. That is why you have not been shown a cookie banner: there is nothing to consent to.

02The cookies we set

The marketing site sets none. The console uses the following cookies when their feature is needed.

NameWherePurposeLifetimeType
authfu.session-tokenauthfu.appKeeps you signed in. It is httpOnly, Secure, and SameSite.Expires with the session. The default is 7 days.Strictly necessary
OAuth stateauthfu.appProtects against cross-site request forgery during a sign-in redirect.Set for seconds during the redirect, then cleared.Strictly necessary
color-modeauthfu.appRemembers whether you chose the light or dark theme. It holds no identifier.PersistentStrictly necessary for preference

All three are strictly necessary. They do not require consent under the ePrivacy Directive or UK PECR.

03What we do not use

Neither site uses any of the following:

  • Google Analytics or Google Tag Manager.
  • Meta pixels or any other advertising pixel.
  • Segment, PostHog, Mixpanel, Amplitude, Plausible, or Fathom.
  • Sentry or any session-replay tooling.
  • An A/B testing service or chat widget.
  • Fonts or scripts served from another domain.

04Fonts are self-hosted

We compile our typefaces into the site at build time. Your browser does not fetch them from a font CDN, so loading a typeface sends your IP address to nobody else.

This is deliberate. Font CDNs are a common and often unnoticed way for a visitor’s IP address to reach a third party.

05Local storage

The console may keep small user-interface preferences in your browser’s local storage. They are not transmitted and contain no identifier. The marketing site does not store anything else in your browser.

06Controlling cookies

You can clear or block cookies in your browser. If you block the session cookie, Authfu cannot keep you signed in to the console.

07Changes

If we add a cookie, we will update the table on this page in the same change. The revision date at the top of this page will move too.

08Contact

Questions about cookies or tracking can go to privacy@authfu.com.