← Back to the studio Legal · 03

Cookie Policy

Effective 14 September 2026

The headline

This site sets no cookies of its own. None. No consent banner, because there is nothing to consent to. The only browser-side storage is one flag. Here is the full inventory.

1. Browser storage (verified from source code)

ItemTypePurposeExpires
skedge_countedlocalStorageOne flag set to "1" after the visitor counter increments on your first visit. On subsequent page loads the counter reads it and does not count you again. Code: js/config.js lines 255, 270.Until you clear browser data

That is the only client-side storage this site uses. No sessionStorage is used anywhere — the form has no in-browser counter. Anti-spam is handled server-side (honeypot field + rate limiting in the Worker).

2. Server-side logging (no browser involvement)

Every page request is logged server-side by functions/_middleware.js at Cloudflare's edge. The middleware POSTs to the Worker's /log endpoint, which writes to Supabase. The browser never sees the Supabase key and cannot read its own IP — the Worker captures it from Cloudflare headers. This is server-side, not cookie-based.

3. Third-party requests

Some requests go to providers when you browse the site or click outward:

ProviderWhenWhy
CloudflareEvery visitHosting, edge logs, and security (see §2 above).
Google FontsFirst paintTypefaces for the design.
Google AnalyticsOnly if enabledAnalytics is OFF by default in the current config (ANALYTICS_ID is empty). If enabled via SKEDGELOOP_DYNAMIC_ANALYTICS=1, gtag loads on first interaction. No analytics are active unless explicitly configured.
X · GitHub · LinkedIn · emailOnly if you clickSocial and mail links. Those providers' own policies apply from that click onward.

4. What "no cookies" means here

No ad networks, no retargeting pixels, no cross-site trackers, no login sessions, no analytics cookies unless explicitly enabled. Nothing follows you around the internet after you leave. The form uses a honeypot field (hidden <input name="website">) and server-side rate limiting — not cookies or localStorage.

5. Your controls

Your browser can block third-party requests, clear storage, or go full private mode — the site keeps working. Want your visit record deleted as well? Email skedgeloop@outlook.com — see the Privacy Policy for the deletion promise.

© SKEdgeloop · Verified against source code in js/config.js, functions/_middleware.js, and worker/worker.js. Matches the Privacy Policy and Terms of Use.