cyberpidgeonEssential authentication
The console uses __Host-scargo_session, a first-party cookie containing an opaque random session identifier. It is HttpOnly, Secure, SameSite=Strict, scoped to the host, and expires after seven days. It is set when you sign up, sign in or recover an account, and removed at sign-out. The server can revoke it earlier. Blocking it prevents account sign-in.
Browser storage
The console keeps API keys entered manually, newly created secrets and CSRF tokens in memory. It does not intentionally persist them in local storage. Your chosen light or dark color theme is saved on this device under cyberpidgeon-theme in first-party local storage. Choosing “Use device setting” removes that saved preference. The preference is not sent to the server and is not used for tracking. Downloaded keys, recovery codes or data exports remain under your control on your device. The console uses no optional analytics, advertising pixels or third-party font requests. An optional-cookie consent banner is not shown because this application does not set those cookies.
External services
Links to documentation, email providers or attachment downloads open external services with their own privacy and cookie practices. Remote images, scripts, forms and clickable links are removed from email HTML previews. This preview is simplified for privacy; it may differ from the original email.
Questions: see the operator and contact details in our privacy notice.