Legal · Cookie and storage notice

This website sets no cookies.

Not a cookie, not an analytics script, not an advertising pixel. Two preferences live in your browser's local storage, and the signed-in workspace adds one session cookie that exists only because signing in requires it.

What this website stores

Measured on the live site: no cookies, no third-party analytics, no advertising or tracking scripts, no embedded third-party video. Two values are written to localStorage, and only when you change the setting they belong to. Neither is sent to us.

Key	Holds	Why	Lifetime
`npl-theme`	`light` or `dark`	Remembers the colour theme you chose	Until you clear it
`rb_demo_lang`	`en` or `zh`	Remembers the language you chose	Until you clear it

Both are readable only by this site. If a browser blocks local storage, the site still works: it simply forgets your theme and language on the next visit.

The workspace is different

Signing in to the workspace — and only signing in — sets cookies from this domain. They are the sign-in itself, not measurement, and they are not shared with anyone.

Cookie	Purpose	Lifetime
`npos_session`	The signed-in session. `HttpOnly`, `SameSite=Lax`, `Secure` over HTTPS.	8 hours, or until you sign out
`npos_code`	The one-time code challenge during sign-in. No authority on its own.	10 minutes
`npos_challenge`	The security-key challenge during sign-in, so a captured prompt cannot be replayed later.	5 minutes

All three are strictly necessary to the operation you asked for. None of them is read by any third party, and nothing is set before you begin signing in.

Why there is no consent banner

A banner exists to obtain agreement for cookies and trackers that are not strictly necessary. There are none to agree to. If analytics, advertising, third-party embedded media or a support widget is ever added, a consent mechanism is added before anything is set, and this page changes first.

Clearing what is stored

Your browser's site-data controls remove the two local-storage keys; signing out ends the session cookie, and it expires after eight hours regardless. Nothing else on this site needs clearing because nothing else is stored.

Contact

Questions about this notice, or about what the workspace stores, go to hello@hashcode-next.com.

Last reviewed 2 October 2026. This notice describes what the software does today; the code that proves each line is in the same repository as this page.