Cookie Policy
We use only what's strictly necessary · no analytics or advertising cookies.
1. Our use of cookies and local storage
Solipsis uses only strictly-necessary cookies and browser storage. We do not use advertising, marketing, or third-party analytics cookies, and we do not track you across sites.
2. What we store, and why
- Authentication session · your signed-in session. You choose how long it lasts at sign-in. "Remember this device" is ticked by default: your session is then kept in your browser's local storage, alongside an encrypted device-trust token that lets this browser unlock without a password, and both last up to 30 days. Untick it and the session is kept in session storage instead, so it ends when you close the tab. Logging out ends it on that device; "log out on every device" under Settings → Devices ends it everywhere. Strictly necessary to use the Service.
- Encrypted device vault and key material · your master seed and password-encrypted vault, stored on your device so you can decrypt your own content. This never leaves your device. Strictly necessary and security-critical.
- Preferences and drafts · local settings such as read markers, notification preferences, and unsent message drafts, stored on your device only.
- Control-room session · for administrative access to the operator control panel, a secure, http-only cookie scoped to that panel. Strictly necessary for that surface.
3. Third-party cookies
When you make a payment, our payment processor Stripe may set cookies necessary for secure checkout and fraud prevention, governed by Stripe's own policies. We do not embed advertising or social-media tracking.
4. Managing storage
You can clear cookies and site data through your browser settings. Note that clearing the encrypted vault or session will sign you out, and if you have not saved your transfer code, clearing key material on your only device can permanently prevent access to your encrypted content.
5. Consent
Because we use only strictly-necessary storage, most jurisdictions do not require a consent banner for it. If we ever introduce non-essential cookies, we will ask for consent where required.