Cookies & Tracking
This page is short because the answer is short: ListLot does not set cookies, and there is no tracker on any page of this site. What follows is the detail behind that claim, so you can verify it rather than take it.
01No cookies
Neither the marketing site nor the app sets a cookie. Not a session cookie, not a preference cookie, not a third-party one. There is no consent banner here because there is nothing to consent to.
Open your browser's developer tools on any ListLot page and look at the cookie jar. It is empty.
02What we use instead
Signing in and remembering your theme still need somewhere to write something. All of it is browser-local storage, readable only by the page that wrote it, and never transmitted automatically the way a cookie is.
| What | Where | Why |
|---|---|---|
| Sign-in token | localStorage | Keeps you signed in. Cleared when you sign out. |
| Theme choice | localStorage | Remembers light or dark so the page does not flash on load. |
| Posting session | sessionStorage | Tracks where you are in a posting run. Dies with the tab. |
| Server URL and token | chrome.storage.local (extension) | Lets the extension reach your workspace. Removed with the extension. |
03No analytics, no pixels
- No Google Analytics, no Plausible, no Mixpanel, nothing equivalent.
- No Meta pixel, no ad-network tag, no conversion tracking, no retargeting.
- No session recording, no heatmaps, no A/B testing script.
- No third-party JavaScript at all on the marketing pages.
We know how many people signed up, because they signed up. That has been enough.
04The one third party a page talks to
Public pages load web fonts from Google Fonts. Your browser fetches them from fonts.googleapis.com and fonts.gstatic.com, which means Google sees the request — your IP address and browser — when a page loads. No cookie is set by it.
It is the one external dependency on the marketing surface, and it is on the list to self-host so the count reaches zero.
05Server logs
Our own servers log requests: IP address, browser, path and timestamp. That is how rate limiting and debugging work, not how marketing works. Logs are rotated within 30 days and are never joined to a marketing profile, because there is no marketing profile.
06Do Not Track
We honour it by construction. There is nothing here to switch off.
07If this changes
If we ever add analytics, this page changes first and — where consent is required — the banner appears before the script does, not after. Questions: emery@listlot.app.