Legal
Cookie policy
peckaboo.com uses no analytics cookies and none that follow you to other sites, and so it shows no cookie banner. This page lists what peckaboo.com stores on your device, so that this is stated rather than merely claimed.
Set on every visit
The site cannot work without these two. The first request sets them, with or without an account.
| Cookie | What it does | How long |
|---|---|---|
Session cookie (__Host-peckaboocom-session) |
Ties your requests together into one session. It keeps you signed in and remembers the language you chose | Two hours after your last request, or as long as you chose under "Stay signed in for": one hour to 30 days |
XSRF-TOKEN |
Protects your forms against cross-site request forgery | Like the session cookie |
Set at every sign-in
| Cookie | What it does | How long |
|---|---|---|
sign_in_device |
A random value that tells this device apart from your others in your sign-in history. That is how the history in your settings shows which device a sign-in came from, and how a device you signed out from another one is recognized when it comes back with its "Remember me" cookie | 400 days, set anew at every sign-in |
Set only after you do something that asks for it
| Cookie | What it does | How long |
|---|---|---|
Remember me (remember_web_…) |
Only if you chose "Remember me" when signing in | 400 days, or until you sign out |
session_lifetime |
Only if you chose a duration other than the default under "Stay signed in for". The cookie carries your choice to this device, because the session's clock is set before peckaboo.com knows who you are | 400 days, or until you choose the default again |
starterkit-console-rail |
Only if you widened or narrowed the narrow bar on the far left. Keeps that choice for your next visit | One year |
starterkit-console-sidebar |
Only if you collapsed or expanded the navigation column. Keeps that choice for your next visit | One year |
The last three hold a short value in plain text: a number of minutes, or a 1 or a 0. The number of minutes is checked against the fixed list of durations you can choose, when it is written and again when it is read. Every other cookie is encrypted and bound to this installation.
And two that are not cookies
Your browser keeps two settings in its storage for this site (localStorage):
| Entry | What it does | How long |
|---|---|---|
starterkit-console-section:… |
Only if you opened or closed a section of the navigation column. One entry per section, holding a 1 or a 0 | Until you clear this site's data in your browser |
bell-in-the-browser:… |
Only if you switched on the bell's notifications under "Notifications in this browser" and your browser allows them. One entry per account, with its number in the name, because the permission belongs to this browser | Until you switch the notifications off again, which deletes it |
They are listed because § 25 TDDDG does not speak of cookies but of storing information on your device or reading it from there, and an entry in the browser's storage is covered just the same.
Why no consent is needed
Everything listed is strictly necessary to provide a service you explicitly asked for: signing in, protecting your forms and your account, and keeping the settings you chose yourself. § 25(2) No. 2 TDDDG applies, so no consent is required. If you refuse these cookies, peckaboo.com cannot sign you in and cannot keep any of your settings.
Protection against bots
Cloudflare Turnstile, in its invisible mode, checks whether a person submits the forms that create an account, check a password or send an email: registering, signing in with a password or a link, and "Forgot your password?". For that, Cloudflare loads a script on these pages that checks characteristics of your browser. peckaboo.com itself stores nothing on your device for it. What Turnstile reads and processes is described in Cloudflare's Turnstile Privacy Addendum, which calls it strictly necessary for detecting bots. § 25(2) No. 2 TDDDG applies here as well: protecting the form is part of what you ask for by submitting it.
Why there is nothing else
Page views are measured on the server, on our own Matomo instance, from the request that already happened. No script runs in your browser for it, and the measurement stores nothing on your device. Cloudflare, which delivers peckaboo.com, sets no cookie of its own. What does land on your device is listed in full in the tables above. The privacy policy describes it in context, along with everything else peckaboo.com does with personal data.
Changes
Every change to this list gets a new version number.