xxxx.fish
Theme

xxxx.fish · Policy

Cookie Notice

Session cookies and local browser storage used by xxxx.fish.

Effective
Last updated

Summary

  • xxxx.fish uses strictly necessary cookies for sign-in and OAuth.
  • Preference and pending-action state may also be stored in first-party localStorage or sessionStorage.
  • Vercel Web Analytics provides cookie-free aggregate traffic reporting. xxxx.fish does not use advertising trackers.

Our approach

xxxx.fish uses necessary session and OAuth cookies, first-party browser storage for interface preferences and pending actions, and cookie-free Vercel Web Analytics.

We do not use advertising cookies, a marketing tag manager, or cross-site behavioral advertising. If that changes, we will update this notice and add any choices required by applicable law.

xxxx.fish is a U.S.-based service operated under the xxxx.fish name.

Analytics

Vercel Web Analytics reports aggregate page views, referrers, device and browser categories, country, and similar traffic information. It does not set analytics cookies or build advertising profiles.

Vercel derives a short-lived identifier from request information to avoid counting the same visitor repeatedly and discards that identifier after 24 hours. Aggregate reports may remain available longer according to the Vercel plan and retention settings.

Vercel’s own privacy notice also applies to analytics processed on their platform.

Cookies we use

Authentication cookie names may change as the authentication service is updated. The current categories are:

  • Better Auth session cookie (strictly necessary): Keeps you signed in to xxxx.fish after X OAuth. Backed by a server session row that may also store IP address and user agent. Duration: Until the session expires or you sign out.
  • OAuth state / PKCE cookie (strictly necessary): Protects the Sign in with X redirect against CSRF and completes PKCE. Bound to the sign-in origin. Duration: Short-lived during the OAuth handshake.

Local storage

First-party localStorage keys used for UI preference and restore hints:

  • xxxx.theme: Remembers light / dark / high-contrast theme preference.
  • xxxx.heatStripCollapsed: Remembers whether the heat strip is collapsed.
  • xxxx.agentPanelOpen: Remembers whether the agent panel is open.
  • xxxx.activeConversationId: Client-side restore hint for the active review thread; the server preference remains authoritative.
  • xxxx.fish:explanation-request:<postId>: Tracks an in-flight explanation request for a post across reloads.

Session storage

First-party sessionStorage holds short-lived UI continuation state, including:

  • Holds a pending scan depth choice across billing redirects.
  • Holds pending Deep context / explanation post ids across short navigations.
  • Holds staged deletion job request ids and selected post ids.

How to manage

You can clear site cookies and storage in your browser settings. Doing so will sign you out and reset local preferences.

You can also sign out in the product and disconnect the X account to stop server-side API use tied to stored tokens.

Updates

Last updated 2026-08-05. Effective 2026-08-04.