Cookies and Browser Storage

noiz.bio does not set any cookies. Not for analytics, not for advertising, not for sign-in. You can check it: no response from noiz.bio carries a Set-Cookie header, and your browser's cookie list for this site stays empty.

There are no third-party trackers, tag managers or advertising pixels on any noiz.bio page, including creator profiles.

A small amount of local storage, kept on your own device and never sent anywhere on its own:

• Your answer to the privacy notice, so it is not shown again: kept twelve months
• A random ID stored beside it, so we can say which choice belongs to which browser if you ever ask. Not attached to analytics
• Your sign-in session, issued by Supabase, our database provider
• Counters for sign-in, password reset, email change and contact-form attempts, so those can be throttled against abuse
• Which in-app notices you have closed
• In the dashboard only: whether you chose the dark, light or system theme
• In a browser where you are signed in to your dashboard: a signed note that keeps your own visits to your page out of your views, kept for 30 days or until you sign out

A few more appear only in particular cases, such as remembering a device at the two-factor step, and the privacy policy lists every one.

Opening a creator's page writes nothing to your device at all. The view is counted on the server as the request happens, and then the request is over.

Opening a profile is mostly a request to us. The exceptions are listed below rather than buried:

• YouTube, Spotify, Apple Music and Twitch embeds load with the page. If a creator has added one, that provider sees your IP address as the page renders: this changed on August 27, 2026, when the players stopped sitting behind a click. Embeds further down a page are only loaded once you scroll near them
• Link icons are copied into our own storage rather than hotlinked, so opening a page does not tell anyone's server that you were interested
• Discord is the exception. If the creator shows a Discord card, your browser loads their avatar, their badges, their server's icon and the picture of a game in their live status from Discord's own CDN as the page renders, so Discord sees your IP address before you interact with anything. You do not need a Discord account for this, and nothing about your account is sent
• Game covers in a My games widget are loaded from Steam's content delivery network, and a GitHub project widget loads the repository owner's picture from GitHub. Each of them sees your IP address when such a widget is on the page
• Four optional typefaces (Satoshi, Array, Panchang and Technor) are fetched from Fontshare when a creator has chosen one, because their license does not let us host the files. Every other font is served by us
• Nothing else on a profile is fetched from anywhere but us. Our own server reads Discord, for a creator's badges and their server's member counts, and the services behind a creator's live cards (Minecraft, Roblox, Steam, YouTube, TikTok, Twitch, Kick, GitHub, Last.fm and CS2, and MET Norway for the weather), using only what the creator entered, and serves the pictures itself. A creator's live Discord status, when they have switched it on, comes from our own database, where our Discord bot keeps the latest one; while the page is open on your screen it asks our server for a newer one every 30 seconds, and never asks Discord

Signing out removes the app's own entries. Clearing this site's data in your browser removes everything, including your saved privacy choice, so the banner will ask again next time.