Cookies

A session cookie, set by Supabase Auth when you sign in. It holds the token that proves the request is yours, it is HttpOnly so no script can read it, and it is marked SameSite so it is not sent from other sites. Without it you would be signed out on every page.

That is the entire list. There is no second cookie.

No analytics cookie. Deuce measures nothing about how you use it.

No advertising or retargeting cookie, and no pixel from anybody else.

No social media embeds, no fonts loaded from a third party, no chat widget, no session recorder, no heatmap.

No cookie at all before you sign in. The pages you can read signed out set nothing.

Under the ePrivacy Directive and the Garante's guidance, a cookie that is strictly necessary to provide a service the user asked for does not require consent. Signing in is that service, and the session cookie is what makes it work.

Showing you an Accept and Reject pair for a cookie you cannot decline without losing the ability to log in would be a choice that is not real. We would rather tell you what it is than stage a decision.

If Deuce ever adds anything that is not strictly necessary, this page changes first and a genuine choice appears with it. That is a promise the product can be held to, because the notice you saw is recorded against your account.

Deuce remembers, in your own browser, that you have read the cookie notice, so it stops appearing. It never leaves your device and it is not a cookie.

Clearing your browser data removes it, and the notice comes back.

Every browser lets you see and delete cookies for a site, usually under Privacy or Site settings. Deleting Deuce's session cookie signs you out, which is the only thing it does.

See also the privacy page for everything Deuce stores on its own servers rather than in your browser.