How Hisoka uses cookies and local storage.
Strictly necessary
hisoka-session— keeps you signed in to the dashboard. HttpOnly, Secure, SameSite=Lax.XSRF-TOKEN— protects authenticated forms against cross-site request forgery.app-theme— remembers whether you chose light, dark, or system appearance.app-locale— remembers your interface language.
These cannot be switched off without breaking sign-in.
Analytics
We do not load third-party advertising or tracking cookies. Any product analytics we run is first-party and does not build cross-site profiles.
Consent banner
The consent prompt stores your choice so it does not reappear. Declining essential cookies is not possible because they are required for authentication; declining optional categories disables the corresponding scripts.
API traffic
Calls to /v1/* are authenticated with a bearer key and do not use cookies at all.
Managing cookies
You can clear cookies in your browser settings at any time. Clearing them signs you out. To delete server-side data, see our Privacy policy.