Privacy and cookies
What we store on your device
We store just two things on your device: one cookie, only once you log in, and one small note in your browser’s local storage.
| Name | What it does | How long |
|---|---|---|
better-auth.session_tokenCookie | Keeps you logged in as you move between pages. It’s only set when you log in, and it’s deleted when you log out. | 30 days, or until you log out |
editxp:noticeLocal storage | Remembers that you’ve seen the “no cookies” notice, so it doesn’t keep appearing. | Until you clear it |
Both are strictly necessary for things you ask for (logging in, and not seeing the same notice again), so under the UK Privacy and Electronic Communications Regulations (PECR) they don’t need your consent. That’s why there’s no cookie banner asking you to accept anything. On the live site the cookie’s name starts with __Secure-, which means browsers only send it over a secure connection.
Our fonts are hosted on our own servers, so loading EditXP doesn’t send your details to font providers.
What we collect and why
ContractContractContractLegal dutyLegitimate interestWho else sees your data
Only companies that help us run EditXP: Cloudflare (hosting and our database) and Resend (account emails), and later a video host, under contracts that stop them using it for anything else. We don’t share data with advertisers or data brokers.
Your rights
Under UK GDPR you can ask to see, correct, download or delete your data, or object to how we use it. If you’re unhappy with how we handle your data, you can complain to the Information Commissioner’s Office at ico.org.uk.
Contact
Email privacy@editxp.com with any privacy question.