Four cookies.
None of them follow you.
There is no consent banner on this site because there is nothing on it that needs consent. This page explains what that claim rests on.
1Summary#
spotit.ai sets three first-party cookies and inherits one from our edge provider. Three are strictly necessary under Article 5(3) of the ePrivacy Directive; one remembers your light or dark preference and is set only after you use the toggle.
There is no advertising cookie, no tag manager, no pixel, no cross-site identifier and no data broker on this site. Nothing here is sold or shared for behavioural advertising.
No banner, because we do not set anything that a banner would have to ask you about.
2The four cookies#
| Name | Category | Purpose | Lifetime | Set by |
|---|---|---|---|---|
| spotit_session | Strictly necessary | Keeps you signed in to the console and protects against CSRF | Session, or 30 days if you tick “remember this device” | First party |
| spotit_theme | Preference | Remembers the light or dark choice made with the toggle in the header | 1 year | First party |
| spotit_region | Strictly necessary | Routes console requests to the region your account is pinned to | 1 year | First party |
| __cf_bm | Strictly necessary | Cloudflare bot management, set on the API edge to separate humans from scripted abuse | 30 minutes | Cloudflare |
All four are set with Secure, HttpOnly where the browser does not need to read them, and SameSite=Lax. The theme cookie is readable by the page because the theme has to be applied before first paint; it contains the literal string light or dark and nothing else.
3How we count visits without a cookie#
Page views are counted by a cookieless analytics service hosted in the EU. It records the page, the referrer, the country and a coarse device class, and it derives a daily visitor count from a rotating hash that cannot be reversed to an individual and cannot follow you to another site. Nothing is stored on your device.
We use the result to see which pages get read and which get abandoned. That is the whole purpose. The provider is listed on the sub-processor page.
4Your choices#
- The theme cookie is only ever set if you press the toggle. Do not press it and it is never written. Clear it and the site follows your operating system.
- The session and region cookies exist only while you are signed in to the console. Signing out removes them. Blocking them means the console cannot keep you signed in.
- The edge cookie can be blocked in your browser. Our bot protection will then rely on other signals, which occasionally means an extra challenge.
- Global controls. Every major browser can block or clear cookies per site. We honour Global Privacy Control where your browser sends it, though on this site it changes nothing, because there is nothing to opt out of.
5Changes#
If we ever add a cookie that is not strictly necessary, we will publish it here and ask for consent before setting it — in that order. Material changes are noted on the changelog. Questions to privacy@spotit.ai.
Something here that does not work for you?
Redlines on the self-serve terms are read, not filed. Send them and you will get an answer from someone who can change the document, usually inside two working days.
Spotit Ltd · Registered in Ireland, company no. 742118 · 14 Hanover Quay, Grand Canal Dock, Dublin 2, D02 XY88, Ireland · VAT IE4218806T