Legal
Cookies
Every cookie and every value the site and the console write to your browser, why, and for how long; the audience measurement writes none.
Updated October 2, 2026
This page completes the privacy policy. It says everything pupitre.studio and app.pupitre.studio write to your browser. None of it is for advertising, none of it follows you from one site to another, and none of it is read by a third party.
On the site
pupitre_theme, cookie, one year: the light or dark theme you chose. Set only if you choose one.pupitre_ref, cookie shared by the site and the console, ninety days: the code of the affiliate link you arrived through, and nothing else. Set only when the address carries?ref=.pupitre_ref_hit, browser session storage, until the tab is closed: the mark that a visit of that link has already been counted.
On the console
- The sign-in cookies, prefixed
better-auth: your session token, kept for sixty days and renewed while you use it, and cookies of a few minutes for the time of a second factor, a passkey or a sign-in through GitHub or Google. Without them, the console does not know who you are. Scripts on the page cannot read them, and they only travel over HTTPS. pupitre_locale, cookie, one year: the language you chose.pupitre_theme, browser local storage: the theme you chose.pupitre_ref: the same cookie as on the site, read again when you create your account.
Audience measurement
The site and the console count their visits with Cloudflare Web Analytics, which writes nothing to your browser: no cookie, no local storage, no identifier. That is why neither shows a consent banner. The privacy policy says what the measurement sends to Cloudflare. The desktop app measures nothing today.
Before 2 October 2026, the site kept your answer to a measurement banner under pupitre_analytics, in your browser’s local storage. Nothing reads it any more; you can clear it.
What your browser asks of others
To display the site and the console, your browser downloads their fonts from our own servers. The only script it loads from elsewhere is Cloudflare’s audience measurement, from static.cloudflareinsights.com, which reports to cloudflareinsights.com.
The desktop app
The desktop app is not a browser: it keeps its settings in its own data folder, and its session in your system’s keychain. It sets no measurement cookie and sends nothing to a measurement tool.
Clearing
You can clear these cookies and values at any time from your browser’s settings. Clearing the sign-in cookies signs you out of the console; clearing the others only forgets your choices.