Privacy

What we store

The app stores only what it needs to sign you in and remember your choices.

• The sign-in session cookie keeps you signed in. The cookie is HttpOnly, Secure, and SameSite=Lax.
• The habitinator_theme cookie remembers light or dark mode. The cookie holds no personal data.
• Your device stores display name, timezone, and timer settings.

What we avoid

• The web app contains no third-party advertising trackers.
• We sell no personal data.
• Board data needs sign-in and stays private.

Your controls

You control your data from Settings.

• To export your data, open Settings, then Account actions.
• To delete your account, open Settings, then Account actions. Delete removes your board data.
• To clear the theme cookie and local preferences, clear site data in your browser.

To report a vulnerability, read security.txt.