Cookies
Cookies.
This site sets no cookies. It runs no analytics, no advertising tags, no pixels, no embedded video and no fonts from anyone else's server. It can store one thing, and only if you ask it to: the colour scheme you pick. There is nothing to consent to, which is why there is no banner.
Version 1.0. Effective . Last reviewed .
1. What that is checked against
Enforced by the build
The claim above is not a policy statement. The build fails if a page requests anything from another host, and it fails on any script other than the two that run the colour scheme switch: each is capped in bytes, has to be identical on every page, and has to match a sha256 listed in the Content-Security-Policy. That header blocks everything else anyway, and you can read it in the response headers rather than take our word for it.
| Item | Status | Detail |
|---|---|---|
| Cookies set | Not held | No Set-Cookie header is sent. check-budgets.mjs fails the build on any script other than the two that run the colour scheme switch, and neither of those sets a cookie. |
| Analytics | Not held | No analytics package is installed. script-src in vercel.json admits two sha256 hashes and nothing else, so a tag added to a page would not run. |
| Third-party requests | Not held | Fonts and images are served from this origin. The build fails on a request to any other host. |
| Forms | Not held | form-action is set to none in the Content-Security-Policy, and no page carries a form. |
| Stored on your device | Published | The colour scheme, if you set one One local-storage key, fx-theme, holding light or dark. Written only when the switch is used, never attached to a request, so no server receives it. Leave the switch on Device and nothing is stored. |
| Server request logs | Not published | Needs whether the host keeps request logs, what they contain, whether the IP address is truncated, and the retention period |
The request log belongs to the host, not to this site, and it is not a cookie. It is listed because a reader checking what is stored should not have to guess whether it exists.
1 of these 6 is not published yet. Rather than a figure nobody has checked, this page says so. Ask privacy@hellofixi.com and it is answered within 2 working days.
2. The one thing stored
Local storage, not a cookie
Using the colour scheme switch in the header writes one value, named fx-theme, to your browser's local storage. It holds the word light or the word dark and nothing else. It is not a cookie: local storage is never attached to a request, so it does not reach this site's host, its mail provider or anyone else. Leave the switch on Device and nothing is stored at all, which is the state every visit starts in.
Nothing is stored until you use the switch, it holds one word, and it is never sent anywhere. Fixi relies on the regulation 6(4) exemption for storage the reader has asked for, and seeks no consent on that basis. If you would rather nothing were stored, leave the switch on Device. Clearing site data for hellofixi.com removes the value, and the switch returns to following your device.
3. Check it yourself
4 things, about a minute
- Open the network panel and reload. Count the requests to any host other than hellofixi.com. The answer is zero.
- Open Application, then Cookies. It is empty, on every page.
- Open Application, then Local Storage. There is at most one key, fx-theme, holding light or dark. If you have not touched the switch there is nothing there.
- Read the Content-Security-Policy response header. Its script-src names two sha256 hashes and no host, which is what makes it impossible for a third script to run even if one reached a page.
4. If that changes
This page changes first. Anything non-essential will ask before it is set, and the ask will be a real choice rather than a button that only says yes. If you find something on this site that sets a cookie, that is a defect: write to privacy@hellofixi.com and it will be acknowledged within 2 working days.