| Name | Type | Purpose | Expires |
|---|---|---|---|
| hahaboo_token | Cookie (HttpOnly, SameSite=Lax, Secure in production) | Keeps you signed in. Contains a signed session token and nothing else. Page scripts cannot read it, which is what stops a cross-site scripting bug from stealing your session. | 30 days, or immediately when you sign out or revoke the device |
| hahaboo_theme | Local storage | Remembers whether you chose light or dark mode, so the page does not flash the wrong theme on load. | Until you clear it |
That is the complete list. We do not set analytics, advertising, retargeting, fingerprinting or social-plugin cookies, and we do not embed third-party tracking pixels.
Some content is served from other domains. Those requests are made by your browser and can be seen by the provider.
| Domain | What it serves | Sets cookies? |
|---|---|---|
| res.cloudinary.com | Images and videos uploaded to the Service. | No |
| fonts.googleapis.com and fonts.gstatic.com | The interface typeface. | No |
These providers receive your IP address and user agent as part of any ordinary web request. They do not receive your account identity from us.
Under the ePrivacy Directive and equivalent rules, consent is not required for storage that is strictly necessary to provide a service the user has explicitly requested. Both items in the table above are strictly necessary: one keeps you signed in, the other stores a preference you set yourself.
If we ever introduce a non-essential cookie, we will ask for your consent first, and this policy will be updated before that happens.
- Sign out of the Service, or revoke a device from Settings, to remove the session cookie.
- Clear cookies and site data in your browser settings to remove everything at once.
- Block cookies for this site in your browser. The Service will still load, but you will not be able to stay signed in.
- Use your browser private mode, which discards everything at the end of the session.
Browser-level instructions are published by each vendor under "clear cookies and site data" or similar.
Questions about this policy go to privacy@hahaboo.com, or to hahaboo, Kathmandu, Bagmati Province, Nepal.