Cookies

Last updated: October 28, 2026

Stream sets one cookie, and only once you sign in: a session cookie that keeps you signed in, for up to thirty days. It is marked HttpOnly, Secure and SameSite=Lax, so scripts on a page can’t read it and other sites can’t send it.

If you sign in with Google, a second cookie holds a one-time code for the trip to Google and back, so that the sign-in can only finish in the browser that started it. It lasts ten minutes at most and is removed as soon as you return.

That’s all. No advertising cookies, no tracking cookies, no analytics on what you write. Signing out, or deleting your account, removes it.

For everything else about your information, see the Privacy Policy.