Cookies.
In force from 16 September 2026
The short version
Two cookies, both strictly necessary, HttpOnly and Secure: ib_session keeps you signed in, and ib_said carries the answer to what you just did for two minutes. There are no advertising, tracking or analytics cookies, so there is no banner.
If you buy Pro, Stripe's checkout may set cookies of its own to take the payment.
This summary is here to be read. The clauses below are what actually binds.We keep cookies to a minimum.
The two cookies we set
ib_session: a strictly necessary, HttpOnly, Secure cookie that keeps you signed in as you move around the app. It holds a signed reference to your session, nothing more. Clearing it simply logs you out.
ib_said: a strictly necessary, HttpOnly, Secure cookie set when you change something while signed in, such as logging time. It carries the answer to what you did to the next page, signed and tied to your account, and it expires after two minutes or as soon as that answer is shown.
What we don't use
No advertising, tracking or analytics cookies. Because we only use essential cookies, we don't need to show a cookie consent banner.
Third parties
If you buy Pro, Stripe's secure checkout may set its own cookies needed to process your payment. See Stripe's cookie and privacy policies for details.
More on how we handle data is in our Privacy Policy.
Ask, and the wording gets fixed rather than explained.