Heedly sets only the cookies and browser-storage entries it needs to work, plus one campaign tag. There are no analytics, advertising or third-party tracking cookies.
Cookies and browser storage used by Heedly
| Name | Type | Purpose | Duration |
|---|---|---|---|
| heedly_sid | Cookie | Keeps you signed in. Random value; only its hash is stored on the server. | Up to 30 days |
| heedly_csrf | Cookie | Protects forms and API calls against cross-site request forgery. | 30 days |
| heedly_dev | Cookie | Recognises a browser you signed in from, to alert you about new devices and to avoid locking you out during brute-force attacks. | Up to 180 days |
| NEXT_LOCALE | Cookie | Remembers the language you chose. | 1 year |
| heedly-theme | Local storage | Remembers your light, dark or system theme choice. | Until cleared |
| heedly-cookie-notice | Local storage | Remembers that you dismissed the cookie notice. | Until cleared |
| heedly-utm | Session storage | Only after you accept: keeps campaign tags from the landing URL until you sign up, so we know which campaign brought you. Not sent to third parties. | Browser session |
If analytics or advertising are ever added, they will load only after you opt in, and this page will list them.