Cookies Notice

1. Summary

Untolds uses only strictly necessary browser storage. We do not use advertising cookies or cross-site tracking pixels. For aggregate traffic measurement we use Vercel Web Analytics, a cookieless analytics product that does not set cookies, does not fingerprint, and does not track users across sites (see section 4). We therefore do not display a consent banner under the EU ePrivacy Directive.

2. What we store

• Authentication session (Clerk). A session cookie set by our authentication provider Clerk keeps you signed in. It is essential to operate the Service.
• 18+ age confirmation. A local flag recording that you have passed the age gate. Without it the gate would re-prompt on every visit.
• UI preferences.Small key-value entries (for example theme, last-used persona, dismissed banners) stored in your browser's local storage.
• Soft-nude unblur state. A per-session flag that records, on the device, that you have tapped to reveal a soft-nude preview. It is reset on page reload and on tab close.
• CSRF/anti-abuse tokens. Short-lived tokens used to protect form submissions and API calls from cross-site abuse.

3. What we do not set

• No advertising or retargeting cookies.
• No third-party analytics that profile users across sites.
• No social-network share pixels.
• No fingerprinting libraries.

4. Aggregate traffic measurement (Vercel Web Analytics)

We embed Vercel Web Analytics to measure aggregate traffic to the Service (page views, referrers, country, device type). The script is served by our hosting provider Vercel and runs without setting any cookies or other client-side storage, and without writing to localStorage. It does not fingerprint your device and does not track you across other sites.

To produce a visitor count without persistent identifiers, Vercel derives a daily-rotating hash from your IP address and user agent that is salted per-site and discarded after 24 hours. Because this processing happens server-side on the provider's infrastructure and does not place or read information on your terminal equipment, no ePrivacy consent is required. The aggregated statistics are visible only to us. Vercel's description of the product is at vercel.com/docs/analytics/privacy-policy.

5. Third-party storage that may be set on payment

When you make a payment through our cryptocurrency processor NowPayments, NowPayments may set its own cookies on its checkout domain. That is governed by NowPayments' own privacy policy and is outside the scope of this notice.

6. Controlling browser storage

You can clear or block cookies and local storage from your browser settings at any time. Doing so will sign you out and reset your preferences; the Service will not otherwise be impaired. Private or incognito browsing also prevents these entries from persisting between sessions.

7. Changes and contact

We will update this notice if we materially change what we store. For questions, write to legal@untolds.chat.