Cookie Policy

• quantis_session — strictly necessary. A signed JSON Web Token identifying your signed-in session. It is HttpOnly (JavaScript cannot read it), SameSite=Lax, and Secure in production. It lasts 12 hours, or 30 days if you tick “Remember me”. Without it you cannot stay signed in. The name is left over from this service’s previous name; it is listed here as it actually appears in your browser, because a cookie policy that named a different cookie would be no use to you.

The token embeds a fingerprint of your password hash, so changing your password immediately invalidates every session issued before the change.

• quantis.consent — records that you accepted, when, and which policy version. Without it the banner could not remember your choice.
• quantis.timeframe — remembers the chart timeframe you last selected, so the workspace opens where you left it. A preference, nothing more.

Both stay in your browser. Neither is transmitted to the server, and neither identifies you.

• No advertising or retargeting cookies.
• No analytics cookies — no Google Analytics, Plausible, Segment, or equivalent.
• No third-party cookies. No external script sets anything, because the pages load no third-party scripts.
• No fingerprinting, session recording, or heatmaps.

Clearing site data for this domain removes all three. That signs you out and makes the consent banner reappear. Blocking the session cookie entirely will prevent signing in — it is what authentication is built on.

Fonts are self-hosted and served from this domain, so no request is made to Google Fonts or any other font CDN while you browse. The pages also load no third-party images, embeds, or iframes.