Cookies & Tracking
Most sites publish a cookie policy that runs to several thousand words and still does not tell you what is actually stored. This one is short, because there is very little to say.
01The short version
SpoolBase sets no cookies. Not for analytics, not for advertising, not even for your login. There is no consent banner on this site because there is nothing to consent to.
We store four small items in your browser's local storage so the app knows you are signed in and remembers how you like things laid out. That is the entire list, and it is below.
We use no third-party analytics, no advertising pixels, no session recording, no fingerprinting, and no data brokers. Nobody is watching you use this site except our own server logs, which record requests, not people.
03What we store in your browser
SpoolBase uses your browser's local storage — a private area that belongs to this site alone, is never sent automatically with requests, and cannot be read by any other website. Here is everything we put there:
| Item | What it holds | Why | How long |
|---|---|---|---|
sb_access |
Your short-lived sign-in token | Proves to our server that you are you, on each request | Expires after 1 hour |
sb_refresh |
A longer-lived token used to get a new one of the above | So you are not signed out every hour | Expires after 7 days |
sb_user |
Your name and email | So the app can greet you and show your account without a round trip | Until you sign out |
sb_sub |
Which plan you are on and its limits | So the app knows whether to show plan limits | Until you sign out |
All four are strictly necessary for the Service to work. There is no optional category, because we have not created one. Signing out deletes all four immediately.
Your browser may also cache SpoolBase's pages, stylesheets and scripts as it does for any website. That is your browser's own behaviour, and it holds no personal information.
04Third-party content on our pages
One thing on our pages is loaded from another company's servers, and we would rather you heard it from us:
- Google Fonts. The typefaces used across SpoolBase (Inter and JetBrains Mono) are served from Google's font servers. Loading them means your browser makes a request to Google, which reveals your IP address and browser to Google as any request does. Google states it does not use these requests to build advertising profiles. No cookie is set by this request.
Nothing else on our pages comes from a third party. There are no embedded videos, no social media widgets, no chat bubbles, no advertising, and no tag manager.
We consider self-hosting the fonts a worthwhile improvement and intend to make it, which would remove the last third-party request from the site entirely. Until then, this is the honest state of things.
05The mobile apps
The SpoolBase apps for iOS and Android store your sign-in tokens on the device, in the same way and for the same reason as the website. They contain no advertising SDK, no analytics SDK, and no attribution or install-tracking software.
If you allow notifications, the app registers with Apple's or Google's push service and we store the anonymous device token it issues, so we can send you a notification. You can revoke that at any time in your device settings, and we delete the token when you disable notifications or delete your account.
We do not use Apple's Identifier for Advertising or Android's Advertising ID, and we have never asked for permission to track you across other companies' apps and websites.
06Server logs
Our web server keeps a standard log of requests: IP address, browser user-agent, the address requested, the response code, and the time. This is not tracking in the advertising sense — it is the record every web server keeps, and we use it for security and for working out why something broke.
We keep these logs for up to 30 days. More detail is in the Privacy Policy.
07Your controls
- Sign out — clears all four stored items immediately.
- Clear site data — every browser can clear local storage for a single site, usually under Settings → Privacy, or by clicking the padlock in the address bar. Doing so signs you out; nothing else is lost, because your data lives on our server, not in your browser.
- Block local storage — you can, but SpoolBase will not be able to keep you signed in, so the app will not work.
- Do Not Track / Global Privacy Control — you can send them, and they change nothing here, because there is nothing to switch off. See the Privacy Policy.
08If this ever changes
Adding analytics, advertising, or any third-party tracker would be a material change under our Privacy Policy. That means we would tell you at least 30 days before it took effect, by email and in the app, and we would ask for your consent where the law requires it — not quietly edit this page and hope you did not check.
We have written it down here so that you can hold us to it.
09Contact us
Related documents: Privacy Policy, Terms of Service, and Refund Policy.