Legal
Cookie policy
Kithe sets cookies for one thing: keeping you signed in. Those two cannot be turned off, because without them there is no way to stay signed in. Nothing here advertises to you or follows you to another site, so this page is short.
Last updated 21 August 2026
01
The note you saw is a note, not a gate
Consent is required for cookies that are not strictly necessary — advertising, or anything that follows you between sites. Kithe sets none of those. The two it does set are strictly necessary and stay on: they are what keeps you signed in, and turning them off would sign you out.
Our page-view counts, listed on the subprocessors page, set no cookie and carry no identifier that follows you, which is why there is nothing here to opt out of.
The notice at the foot of the page on your first visit says so and then gets out of the way. Nothing is withheld until you press the button, nothing changes when you do, and the site behaves identically whether you dismiss it or ignore it. A banner that holds a page hostage over two sign-in cookies would be theatre.
That it has been dismissed is remembered in your browser’s local storage rather than in a cookie, because setting a cookie to record that somebody read about cookies is a joke at the reader’s expense. Clear your site data and the note comes back.
If we add a cookie that needs consent, this page is updated and a consent control appears with it.
02
What is actually set
Only when you sign in. Browsing the home page, the pricing page, the examples or running a check on the try page without an account sets no cookies at all.
| Name | What it is for | How long |
|---|---|---|
| sb-<project>-auth-token | Holds your session after you sign in. Without it, every page would ask you to sign in again. | Until it expires or you sign out |
| sb-<project>-auth-token-code-verifier | A short-lived value used while a sign-in is in progress, so the response that comes back can be matched to the request that started it. | Minutes; deleted as soon as sign-in finishes |
03
What is not set
- Analytics cookies. We do not use any.
- Advertising, remarketing or tracking cookies, and pixels.
- Third-party cookies.
- Anything that tries to identify your browser between visits.
04
Your IP address
Not a cookie, but you would reasonably want to know. To stop one person running thousands of scans, Kithe counts requests. Your IP address is not stored: it is turned into a short irreversible value first, and that is what the counter is kept against.
The counter expires on its own. It exists so that the free check stays free for everybody, and for nothing else.
05
Turning them off
Every browser lets you block or delete cookies for a site. Blocking Kithe’s will stop you signing in, because the sign-in cookie is how a session works — there is no way around that, and no fallback worth pretending about.
Everything that does not need an account keeps working with cookies blocked entirely, including the free check.
06
Where this sits
This page is part of our terms of service, and clause 08 there sets out everything else we store. Questions to [email protected].