There are no cookies
noiz.bio does not set any cookies. Not for analytics, not for advertising, not for sign-in. You can check it: no response from noiz.bio carries a Set-Cookie header, and your browser's cookie list for this site stays empty.
There are no third-party trackers, tag managers or advertising pixels on any noiz.bio page, including creator profiles.
What is stored instead
A small amount of local storage, kept on your own device and never sent anywhere on its own:
- Your answer to the privacy notice, so it is not shown again: kept twelve months
- A random ID stored beside it, so we can say which choice belongs to which browser if you ever ask. Not attached to analytics
- Your sign-in session, issued by Supabase, our database provider
- A note of any device you marked as trusted for two-factor authentication
- Counters for sign-in, password reset, email change and contact-form attempts, so those can be throttled against abuse
- Which in-app notices you have closed
That list is complete, and a test in this codebase fails if a new storage key is added without being added to the privacy policy's table too.
Visiting someone's profile
Opening a creator's page writes nothing to your device at all. The view is counted on the server as the request happens, and then the request is over.
What loads from third parties, and when
Opening a profile is mostly a request to us. The exceptions are listed below rather than buried:
- YouTube, Spotify and Twitch embeds load with the page. If a creator has added one, that provider sees your IP address as the page renders: this changed on August 27, 2026, when the players stopped sitting behind a click. Embeds further down a page are only loaded once you scroll near them
- Link icons are copied into our own storage rather than hotlinked, so opening a page does not tell anyone's server that you were interested
- Discord is the exception. If the creator shows a Discord card, your browser loads their avatar, their badges and their server's icon from Discord's own CDN as the page renders, so Discord sees your IP address before you interact with anything. You do not need a Discord account for this, and nothing about your account is sent
- Game covers in a My games widget are loaded from Steam's content delivery network, and a GitHub project widget loads the repository owner's picture from GitHub. Each of them sees your IP address when such a widget is on the page
- Four optional typefaces (Satoshi, Array, Panchang and Technor) are fetched from Fontshare when a creator has chosen one, because their license does not let us host the files. Every other font is served by us
- Nothing else on a profile is fetched from anywhere but us, and nothing is polled: there is no live status, and no data is read from any game or platform API
Clearing it
Signing out removes the app's own entries. Clearing this site's data in your browser removes everything, including your saved privacy choice, so the banner will ask again next time.