Cookie Policy

PepperLime uses exactly one cookie, and it exists to keep you signed in. There are no advertising cookies, no third-party trackers, and no analytics cookies.

session — a signed token that identifies your account after you sign in. It is HTTP-only (scripts on the page cannot read it), marked secure in production, restricted to same-site requests, and expires after 7 days. Signing out deletes it immediately.

Your browser may also keep small amounts of PepperLime data locally (for example, interface preferences). This data stays on your device and is never used to track you.

You can clear or block cookies in your browser settings at any time. Because the session cookie is the only way we know who you are, blocking it means you will not be able to stay signed in.

If PepperLime ever adds analytics or other cookies, this page will list them plainly — what they are called, what they do, and how long they live — and the date above will change.