Cookie Policy
Last updated September 29, 2026
No ad cookies. No analytics cookies. No banner. Here’s exactly what gets stored, and why.
1. The short version
taste.dev doesn’t set any cookies of its own, and it doesn’t use analytics, advertising, social-media or tracking cookies, pixels or similar technologies. The website doesn’t use your browser’s local storage or session storage either. The Taste app contains no advertising or analytics SDKs and doesn’t track you across other apps or websites.
The only cookies you might receive are strictly necessary security cookies from Cloudflare, which protects the site. Strictly necessary storage doesn’t require consent under the EU ePrivacy Directive and the UK PECR, so we don’t show a cookie banner. If we ever add non-essential cookies, we will ask for your consent first, with rejection as the default.
2. What cookies are
Cookies are small text files a website stores in your browser. Similar technologies include local storage, session storage, pixels and SDKs in apps. In this policy, “cookies” covers all of them. First-party cookies are set by the site you visit. Third-party cookies are set by someone else.
3. Security cookies Cloudflare may set
Cloudflare sits in front of taste.dev and api.taste.dev to deliver pages quickly and block attacks. Depending on the security settings in force and on how your traffic looks, Cloudflare may set one of these strictly necessary cookies. When we last checked, normal visits received none.
| Cookie | Set by | Purpose | Duration |
|---|---|---|---|
| __cf_bm | Cloudflare | Distinguishes people from bots when bot protection is active | 30 minutes |
| cf_clearance | Cloudflare | Remembers that you passed a security challenge | Up to the challenge passage setting (typically 30 minutes to 1 day) |
| _cfuvid | Cloudflare | Applies rate limits fairly to visitors who share an IP address | Session |
These cookies don’t identify you and aren’t used for analytics or advertising. See Cloudflare’s cookie documentation and its privacy policy.
4. Content from other sites on member pages
Member pages (taste.dev/@username) can show images hosted elsewhere, such as GitHub avatars, README badges and screenshots of the projects members link to. Your browser loads those images directly from the host, which receives your IP address and browser details the way any website does. Taste doesn’t allow those hosts to run scripts on our pages, and our security headers block embedded frames. We send only the origin (taste.dev), not the full page address, as the referrer. When you click a link to another site, that site’s own cookie and privacy policies apply.
5. Storage in the Taste app
The iOS app stores a few things on your device, all strictly necessary to provide the features you use:
| What | Where | Why |
|---|---|---|
| Sign-in tokens | iOS Keychain (this device only, not backed up) | Keep you signed in securely |
| Preferences and drafts | App preferences | Remember settings and unsent posts |
| Chat cache and outbox | App database on the device | Show messages offline and send them when you reconnect |
| Image cache | App cache | Load photos faster |
| Firebase installation ID and push token | Firebase SDK / iOS | Sign-in and push notifications you allow |
Deleting the app removes this data from your device. The app doesn’t use the advertising identifier (IDFA).
6. Your choices
You can block or delete cookies in your browser settings. Blocking Cloudflare’s security cookies may mean you see more security challenges. We honor Global Privacy Control signals as described in our Privacy Policy. Since we don’t track you, there’s nothing further to switch off.
7. Changes and contact
If we change how we use cookies, we will update this page and its “Last updated” date. If we introduce any non-essential cookie, we will ask for your consent before setting it. Questions: [email protected], TakeOnePiece LLC, 1 Broadway, Cambridge, MA 02142, USA.