Cookie Policy
Last updated: 8 November 2026
Skycle.app sets at most two cookies, each only when you ask for the feature it serves: signing in with Bluesky, or picking a language. Because each is strictly necessary for what you asked for, French and EU guidance (CNIL, ePrivacy) does not require consent for them, so there is no cookie banner.
The cookies we set
| Name | Purpose | Lifetime | Set when |
|---|---|---|---|
sid | Keeps you signed in (encrypted session) | 14 days from sign-in; not renewed just by using the app | You sign in with Bluesky |
skycle-lang | Remembers the language you picked (English or French) | 1 year | You pick a language with the language selector, or open a page at a language's own address (such as /fr). Never set by the automatic detection, which only reads your browser's language |
If you never sign in and never pick a language, Skycle.app sets no cookie at all. We do keep one small, non-cookie piece of storage in your browser (localStorage): the list of friend avatars you chose to hide from your own circle view. It never leaves your browser, is not read by our servers, and — like a cookie — is covered by French “Informatique et Libertés” rules (art. 82), but is exempt from consent for the same reason as the sid cookie: it only stores a choice you made for a feature you are using.
What we removed
Until this page was rewritten, Skycle.app loaded Google Analytics for every visitor, before any consent choice — the “Reject all” button in the old banner had no actual effect on it. Both Google Analytics and the banner have been removed. Nothing is tracked across visits or across sites.
Audience measurement without a cookie
We use Umami, hosted on our own infrastructure (no third party receives the data), to see how many people visit each page, in aggregate. It does not use a cookie or any other persistent identifier and cannot follow you across visits — see the Privacy Policy for exactly what it collects.
Your browser's own controls
Most browsers let you block or delete cookies in their settings. Doing so for Skycle.app simply signs you out (the sid cookie is the only thing it would remove); it does not affect anything else on the site.
Changes to this policy
We may update this page; the date at the top and the version history below always reflect the latest change.
Contact
Questions about cookies: contact@skycle.app.
Version history
- 8 November 2026 — Audience measurement is now Umami, self-hosted on our own infrastructure, instead of Vercel Web Analytics; the language preference cookie is listed.
- 1 November 2026 — Security review follow-up (#35, PR #97): fixes the false claim that the sid cookie is renewed just by using the app (it is set once, for 14 days, at sign-in); mentions the localStorage entry used to hide friends; links to the exact Vercel Web Analytics description in the Privacy Policy.
- 1 November 2026 — Full rewrite (#35): Google Analytics (which set a tracking cookie before consent) is removed, along with the cookie banner. Only the strictly necessary session cookie remains, which does not require consent.
- 28 March 2024 — Initial publication (a humorous, non-compliant text that did not reflect Google Analytics' tracking cookie).