Cookie Policy

Cookies are small text files stored on your device when you visit websites. Some are essential (e.g., to keep you logged in), others track your behavior across sites for advertising. We only use the first kind.

Essential (always on, no consent needed)

• auth-token — keeps you signed in to your account (expires after 30 days)
• csrf-token — protects against cross-site request forgery (session-only)

Analytics (privacy-respecting, no consent needed under GDPR)

• We use Cloudflare Web Analytics which sets NO cookies and stores no personal data
• Your IP is not stored; no cross-site tracking, no fingerprinting

What we DON'T use

• Google Analytics
• Facebook Pixel
• Hotjar / FullStory / similar session-replay tools
• Ad-tracking cookies of any kind
• Third-party advertising cookies

Since we only use essential cookies, there's nothing to disable. If you delete the auth-token cookie, you'll be logged out — that's normal. All major browsers let you clear cookies via settings.

Our infrastructure providers (edge hosting, managed database, transactional email) may set their own cookies for security and operational purposes when you interact with their domains. We don't control those. Specific vendor list available on request via hello@listomize.com.

If we ever add tracking cookies (we don't plan to), we'll show you a clear consent banner before setting them. You'll always have the choice.

Questions? Email hello@listomize.com. We respond within 48 hours.