Cookie Policy - Merci!

What we use

Our own pages set no cookie, and we run no advertising cookies, cross-site trackers or third-party analytics. Signing in is handled by Appwrite, our authentication provider: when you sign in, its server (appwrite.merci.0x12.eu) sets a session cookie. Your browser treats it as a third-party cookie, because it belongs to Appwrite’s domain rather than to this site. The app also keeps a few values in your browser so it can work. Everything is listed below.

ENTRY

TYPE

LIFETIME

PURPOSE

a_session_merciThird-party cookie · appwrite.merci.0x12.eu

Strictly necessary

1 year

Appwrite session cookie: keeps you signed in. It is HttpOnly (the page’s JavaScript cannot read it), Secure (HTTPS only) and only sent to appwrite.merci.0x12.eu. Signing out deletes it. Appwrite may also set a copy suffixed “_legacy” for older browsers.

cookieFallbacklocalStorage

Strictly necessary

Until you sign out

Written by the Appwrite SDK when you sign in, because this site and Appwrite are on different domains. It holds a copy of the session value that the page’s JavaScript can read, and it is what keeps you signed in when your browser blocks third-party cookies. Signing out empties it.

merci.appwrite.logoutlocalStorage

Strictly necessary

Until cleared

Written when you sign out so that your other open tabs sign out too. It only holds the time of the sign-out.

app-deviceIndexedDB

Strictly necessary

Until you remove this device

Holds this browser's end-to-end encryption device keys. Your files can only be decrypted with them.

app-device-pairingIndexedDB

Strictly necessary

Until pairing completes

Temporary keys used while another of your devices approves this browser.

appearancelocalStorage

Functional

Until cleared

Remembers the light, dark or system appearance you selected.

bg_viewbg_sortlocalStorage

Functional

Until cleared

Remember the file view (grid, compact or list) and the sort order you chose.

bg_open_newfoldersessionStorage

Functional

Until the tab closes

One-off flag that opens the “New folder” dialog once you reach the dashboard. It is removed as soon as it is read.

Analytics

We do not currently run visitor analytics or set analytics cookies.

Managing cookies and browser storage

You can delete the cookie and clear this storage in your browser settings at any time. Blocking third-party cookies does not prevent you from signing in: the session is then carried by the cookieFallback entry described above. Clearing the storage signs you out of the app on this browser and removes its encryption device keys: you will need another approved device or your recovery key to enrol this browser again.

Questions about this policy? Write to privacy@merci.0x12.eu.