- We use three first-party cookies: one to keep you signed in, one to remember your cookie choice, and, only if you allow it, one to remember which creator referred you.
- No advertising, analytics or social media cookies.
- You can change your choice at any time with “Cookie settings” in the footer.
1. What cookies are
Cookies are small text files a website stores in your browser. Under EU ePrivacy rules (such as Article 5(3) of Directive 2002/58/EC and national laws implementing it), we may only store cookies that aren’t strictly necessary with your prior consent. Refusing is as easy as accepting.
2. The cookies we use
| NAME | PURPOSE | TYPE | DURATION |
|---|---|---|---|
__Host-unbound_session | Keeps you signed in to your account and dashboard. Contains a random token. The server stores only its hash. | Strictly necessary · first party · HttpOnly | 30 days (1 hour for administrators), or until you sign out |
__Host-unbound_consent | Remembers your cookie choice and the policy version you saw, so we don’t ask again. | Strictly necessary · first party | 180 days |
__Host-unbound_ref | Remembers the creator’s referral link you arrived through, so they get credit if you sign up within 60 days. Contains a random click identifier. | Requires your consent · first party · HttpOnly | 60 days |
__cf_bm, cf_clearance (only when our Cloudflare protection is active) | Set by Cloudflare to tell people from bots and protect the site from attacks. | Strictly necessary · security | 30 minutes to 1 year, as set by Cloudflare |
The website doesn’t use localStorage or other browser storage for tracking. The desktop app doesn’t use website cookies. It stores your sign-in token encrypted with your operating system’s credential protection.
3. If you decline the referral cookie
Nothing is stored in your browser. If you arrived through a creator’s link, their code is only added to the download and sign-up links on the page you’re viewing, so a sign-up during that visit still credits them. Our server counts each link click using a keyed one-way hash of the IP address, without storing anything on your device. If you download the Windows installer, the creator’s code is part of its file name, and the desktop app asks you before crediting them. See the Privacy Policy.
4. Changing your choice
Use (also in the footer of every page). If you withdraw consent, we delete the referral cookie straight away. You can also delete cookies in your browser settings. Deleting the session cookie signs you out.
5. Contact
Questions: privacy@unbound-engine.com.