DeveloperBootstrap

Cookies Policy

What this site stores in your browser, and which other services your browser contacts.

Last updated: November 4, 2026

The short version

DeveloperBootstrap does not use advertising or marketing cookies, social media tracking pixels or ad networks. You can read, learn and use the Playground without an account, and without this site setting any cookie in your browser.

Counting visits with Google Analytics is optional. If it is switched on for the site, we ask you first and it stays off until you say yes. Until then, nothing is sent to Google and Google sets no cookie.

Cookies this site sets

These are set only when someone signs in. They are strictly necessary for signing in, so no consent is asked for them.

Cookies set by this site when you sign in
NameWhat it doesLasts
access_tokenKeeps a signed-in user signed in. HttpOnly, so scripts on the page cannot read it.15 minutes
refresh_tokenRenews the signed-in session without asking for the password again. HttpOnly.7 days
db_sessionA marker that this browser is signed in, so pages do not ask the server on every view. It holds the value 1 and nothing about you, and grants nothing.7 days
mfa_pendingHolds a sign-in between the password step and the two-factor code. HttpOnly.5 minutes

Cloudflare, which protects and delivers the site, may set its own security cookie under its own policy.

Cookies set only if you say yes

If visit counting is switched on and you accept it, Google Analytics sets these cookies. If you reject, or your browser sends Global Privacy Control, they are never set.

Cookies set by Google Analytics when you accept visit counting
NameWhat it doesLasts
_gaGoogle Analytics: tells one browser from another so visits can be counted. Holds a random id.2 years
_ga_ followed by an idGoogle Analytics: keeps the state of your current visit.2 years

What your browser keeps (not cookies)

The site stores a few things in your browser's own storage, at your request or to make it work. They never leave your device unless you are signed in and the feature needs them.

  • Your theme (light, dark or system). So the site looks the way you chose.
  • Lesson progress, notes and bookmarks. So you can pick up where you left off. This stays on your device unless you are signed in.
  • Drafts you save, such as a feature request. So you do not lose what you typed.
  • Your analytics choice and a random id. To remember your choice, and to keep a record that you made it. Only when visit counting is switched on.

You can clear all of this at any time in your browser settings.

Other services your browser contacts

Fonts are served from this site, so no request goes to a font provider. These services are contacted only in the situations described.

  • Cloudflare Turnstile

    When: When the newsletter or feature-request form comes into view.

    What: Checks that you are a person, not a bot. Cloudflare receives your IP address and browser details to do this, under its own privacy policy.

  • Google Analytics (Google LLC)

    When: Only if visit counting is switched on for the site, and only after you say yes.

    What: Counts page views and how visitors reach the site. Google receives your IP address, the pages you view, your browser and device type and your approximate location, and sets the analytics cookies above, under its own privacy policy. We switch off advertising features and advertising signals, and we send Google no name, e-mail address, account id or search text. It is not loaded if your browser sends Global Privacy Control.

  • jsDelivr and sql.js.org

    When: Only on the Playground page.

    What: Download the Python and SQL engines that run in your browser. Like any website you visit, they see your IP address.

  • Sentry

    When: When a page crashes, if error monitoring is switched on.

    What: Receives an error report: the page address, your browser type and the error details. We do not record sessions or screens.

Your choices

  • When visit counting is on, the "Cookie settings" link in the footer reopens your choice at any time. Saying no stops counting at once.
  • We honour the Global Privacy Control signal. If your browser sends it, visits are not counted and you are not asked.
  • Your browser lets you block or delete cookies and clear site storage. Blocking the sign-in cookies means you cannot sign in.

Updates to This Policy

If we change what the site stores or which services it contacts, we update this page, and ask for your choice again if the change affects it.

Contact Us

If you have any questions about our use of cookies, please contact us:

DeveloperBootstrap.com Privacy Team

Email: [email protected]

Subject: Cookies Policy Inquiry