Cookies and local storage
Which cookies and local data Outbox uses. Only necessary ones, which is why there is no banner.
Last updated:
What we use
| Name | Type | Purpose | Duration |
|---|---|---|---|
| Session (api.out-box.dev) | Necessary cookie | Keep you signed in | Until you sign out or it expires |
| outbox_lang | Necessary cookie | Remember your language | 1 year |
| Cloudflare Turnstile | Security | Tell humans from bots at signup and login | Challenge session |
| Local preferences | localStorage | Library sort and view, recents, favorites, search index, whether this browser had a session (just a yes or no) | Until you clear them |
Analytics: we use Cloudflare Web Analytics, which sets no cookies, stores nothing in your browser and does not track you across sites. We do not use Google Analytics, social pixels or advertising.
Pages published by users
Pages published by users run isolated in a sandboxed iframe with an opaque origin: they cannot read Outbox cookies. If a page loads third-party resources, that is up to whoever published it.
How to control them
You can clear cookies and local data from your browser. If you block necessary cookies, you will not be able to sign in.