Cookies and browser storage

This page lists every cookie Flyox sets. There are two.

There is no consent banner here on purpose. Flyox sets no advertising cookies, no analytics cookies and no tracking cookies of any kind. The only two cookies it sets are the ones that make signing in work and keep the sign-in safe — without them the product cannot function, so there is nothing meaningful to consent to and no reason to interrupt you with a dialogue that offers no real choice.

The cookies

Name	What it does	Type	Lifetime	Flags
`sessionid`	Remembers that you are signed in. Holds a random identifier — no personal data, no financial data.	Strictly necessary	Until you sign out or close the browser. Up to 30 days if you tick "remember me".	HttpOnly (JavaScript cannot read it), SameSite=Lax (not sent from other sites), Secure in production (HTTPS only)
`csrftoken`	Proves that a request to change something came from a Flyox page and not from another site you happened to have open. Holds a random token.	Strictly necessary	Up to a year	SameSite=Lax, Secure in production. Readable by the page's own script — that is how it is sent back.

Other browser storage

Flyox does not use localStorage, sessionStorage or IndexedDB to hold any financial or personal data.

Third parties

None. Every script, stylesheet and font Flyox uses — including the Chart.js charting library and the Inter and Space Grotesk fonts — is served from Flyox's own address. Opening a Flyox page sends no request to any other company, so no third party receives your IP address or browser details from it. The page's security policy tells your browser to refuse anything loaded from elsewhere.

If analytics is ever added

Analytics, session recording and advertising cookies are not strictly necessary. If any is ever added, this page will list it, and it will be off until you turn it on — with refusing as easy as accepting, and no pre-ticked boxes.