covet

Cookie Policy

Just one cookie. Promise.

Covet uses a single session cookie to keep you signed in, and nothing else. Here are the details.

Last updated:

One cookie

covet_session keeps you signed in for up to 30 days.

No trackers

No analytics, ad pixels or third-party scripts.

No banner

Strictly necessary cookies don't need consent.

Private images

Store images load via our proxy, not the store.

On this page
  1. 1The short version
  2. 2What cookies are
  3. 3The cookie we use
  4. 4What we don't do
  5. 5Legal basis
  6. 6Managing cookies
  7. 7More information

01The short version

Covet uses one cookie, and it is strictly necessary: it keeps you signed in. We don’t use analytics, advertising or social-media cookies, and we don’t load third-party trackers on mycovet.app.

That’s why you won’t see a cookie banner on Covet — there is nothing to consent to.

02What cookies are

Cookies are small text files a website asks your browser to store. Your browser sends them back to that website on later visits, which lets it remember things such as whether you’re signed in. Similar technologies include local storage and tracking pixels; this policy covers those too.

03The cookie we use

This is the complete list of cookies set by mycovet.app:

Cookie
covet_session
Category
Strictly necessary
Purpose
Keeps you signed in. Holds a random session token; our servers store only a hash of it, along with your browser's user-agent.
Duration
30 days, or until you sign out
Attributes
First-party, httpOnly, SameSite=Lax, Secure (in production)

If you browse Covet without signing in — for example, to view a shared list or reserve a gift as a guest — no cookie is set at all.

04What we don't do

  • No analytics cookies or analytics scripts that track you across pages.
  • No advertising, retargeting or social-media pixels.
  • No third-party trackers or fingerprinting.

Images load through Covet

Product images on lists are served through Covet’s own image proxy, so stores can’t set cookies on you or see your IP address when you look at someone’s wishlist.

We do use your IP address briefly for rate limiting to protect sign-in and other sensitive actions. That isn’t a cookie: it is kept in a rate-limit table for windows of at most one hour and is never linked to your profile.

06Managing cookies

You can delete or block cookies in your browser settings at any time. If you block covet_session, you can still browse public and unlisted lists, but you won’t be able to sign in. Signing out removes the cookie and ends the session on our servers.

07More information

For everything else about how we handle personal data, see our Privacy Policy. Questions about cookies can go to [email protected].

Questions?

A real person reads every message. We usually reply within two business days.

[email protected]