Legal
Cookies
remempass.org sets one cookie, only to keep you signed in. No analytics, no advertising, no tracking.
Effective 21 October 2026 · Version 2026-10-21
The cookie we set
| Name | Purpose | Lifetime | Attributes |
|---|---|---|---|
__Host-remem_session | Keeps you signed in to your website account. | 30 days from last use, or until you sign out | Secure; HttpOnly; SameSite=Lax; Path=/ |
It is set only after you sign in. It holds a random token that cannot be read by scripts, and it is never sent to any other site. Because it is strictly necessary for a service you asked for, the ePrivacy rules (Directive 2002/58/EC, Art. 5(3)) do not require your consent for it, which is why there is no cookie banner.
Security cookies set by Cloudflare
Our host, Cloudflare, can set its own cookies when it filters suspicious traffic or challenges a visitor that looks automated. These include __cf_bm and cf_clearance. Cloudflare classifies them as strictly necessary and uses them only to tell people from bots (Cloudflare cookie policy).
The sign-up and sign-in forms load Cloudflare Turnstile from challenges.cloudflare.com to check that a human is filling them in. Cloudflare describes the signals it processes, and states that it does not use them to identify, profile or target anyone, in its Turnstile privacy addendum.
What we do not use
No analytics, advertising, social media or other third-party cookies. No pixels or fingerprinting. Nothing written to your browser's local storage.
Questions: privacy@remempass.org.