Cookie Policy
Effective October 19, 2026
ServeStamp uses a small amount of essential storage to keep you signed in and remember your settings. We don't use advertising cookies and we don't sell your information. Our hosting provider, Lovable, collects basic visit and performance statistics to run and improve its service.
What we store on your device
- Sign-in session (a key beginning with sb- and ending in -auth-token)
- Essential local storage for your account session. It is refreshed while you use the app and removed when you sign out or clear browser storage. Recovery can temporarily use a related -code-verifier key until the sign-in or recovery exchange completes. The library may also maintain a related -user key for account information, with the same sign-out lifetime.
- servestamp:last-seen-verified
- Essential functional preference remembering which verified stamps you have seen, so the same stamp does not repeatedly appear as new. Updated when you visit Home; stays until browser storage is cleared.
- servestamp:nudge:[account]:[home, record or milestone]
- Essential preference storage preventing repeated Premium suggestions. Each timestamp suppresses that suggestion for 14 days; it remains until replaced or browser storage is cleared. It is not sent to advertising or analytics services.
- servestamp:premium-visited:[account]
- Essential preference remembering that you have visited Premium, so its navigation dot disappears. Remains until browser storage is cleared.
- servestamp:cookie-notice
- Remembers that you dismissed the cookie notice. Remains until you clear browser storage.
Hosting cookies and statistics
- __cf_bm
- Essential hosting security cookie for bot protection. Expires after approximately 30 minutes of inactivity.
- session-id
- Set by our hosting provider to count visits. Expires after 30 minutes of inactivity.
- Hosting performance script
- Set by our hosting provider to measure page performance and errors. Session identifiers are kept in memory.
Other technologies and services
App code does not use sessionStorage or IndexedDB, and does not install an offline service worker. Our fonts are hosted with ServeStamp; your browser does not request them from Google. Authentication, hosting and private photo storage are necessary to operate the service. Nonprofit searches run on our server.
The Lovable editor preview may use its own sign-in cookies, preview diagnostics and editing tools. These are separate from ServeStamp's production account storage. A Lovable badge may also be added by hosting; it is not app account storage.
Your choices
You can remove these items through your browser's site-data settings. Removing sign-in storage signs you out; removing preferences may show notices again. Your browser's privacy settings or an extension can also block analytics scripts.
Questions? hello@servestamp.com.