Cookie Notice

Last updated: 2026-05-07 Version: 1.0

What cookies we use

We use only one cookie: a first-party session cookie containing a signed JWT. It is http-only, secure, and samesite=lax. It expires 30 days after sign-in or when you sign out, whichever comes first.

What cookies we do not use

  • No analytics cookies (no Google Analytics, no Mixpanel, no PostHog).
  • No marketing or advertising cookies.
  • No third-party cookies.
  • No tracking pixels.

How to opt out

Because the session cookie is essential for sign-in, opting out means signing out and not using the toolkit. You can clear the cookie at any time via your browser's settings.

Cookie consent banner

On your first visit we show a one-time banner explaining our cookie use. The only cookie we set is the essential session cookie, and only after you sign in. The banner is informational — it does not gate sign-in, because we use only essential cookies under PDPA.

Contact

DPO: Derrick Teo — derrick@elitez.asia