Cookies and device storage
Last updated 14 September 2026
This site sets no cookies. Not for analytics, not for advertising, not for anything else. There is no consent banner because there is nothing to consent to under the rule that requires one.
Why there is no banner
The law that produces cookie banners is Article 5(3) of the ePrivacy Directive, in Portugal Lei 41/2004. It is not about cookies specifically: it applies to storing information on your device, or reading information already stored there, whatever the mechanism — cookies, localStorage, sessionStorage, IndexedDB, device fingerprints.
Consent is required unless the storage is strictly necessary for something you asked for. This site stores one thing, and it is the exempt kind. Everything else it does leaves your device untouched.
What is stored on your device
- devsweep-theme, in localStorage. Remembers whether you chose the light or dark appearance, so the page does not flash the wrong one on your next visit. Written only if you press the toggle yourself. Kept until you clear this site's data in your browser.
That is the complete list. It is a preference you set deliberately, it never leaves your browser, and nothing on our side can read it. Under Article 5(3) it is strictly necessary for a feature you requested, so it is exempt from consent — but it is listed here anyway, because a page claiming "no cookies" while quietly writing to your browser would be the sort of half-truth this page exists to avoid.
Analytics, and why it stores nothing
We count visits, so we know whether anyone is reading this. That is done with PostHog, on their European infrastructure in Frankfurt, configured so that it writes nothing to your device at all:
- No storage. PostHog runs in memory-only persistence mode. What it needs exists in the page's memory and is gone when you close the tab. No cookie, no localStorage, no sessionStorage.
- No IP address. IP capture is disabled on the project. Your address is not recorded, and it is not used to derive a location beyond the country your browser reports.
- No profile. No visitor record is created, because there is no identifier stable enough to attach one to. We cannot tell whether you have been here before, and we cannot single you out.
- No session recording, no heatmaps, no automatic capture. Only page views and two deliberate events: that someone started a download, and that someone opened the checkout. Neither carries anything about who.
- Do Not Track is honoured. If your browser sends Do Not Track or Global Privacy Control, the analytics script is never loaded in the first place.
The consequence, stated plainly: we can see that a hundred people arrived and three bought. We cannot see which three, and we cannot follow anyone from one visit to the next. That is the whole point.
Purchases
When a purchase completes, our server records that a sale happened, tagged with the order reference and no more. Your email address, name and country are handled by the payment provider and by us for the licence itself — see the privacy notice — but they are never sent to the analytics service.
What this site does not do
- No advertising or marketing cookies, and no advertising networks.
- No third-party tracking pixels — no Meta, no Google Ads, no LinkedIn.
- No fingerprinting: nothing here samples your fonts, canvas, audio stack or hardware to recognise you without storage.
- No sharing or selling of anything to anyone, for any purpose.
One external request is worth naming for completeness: the page loads its typefaces from Google Fonts, which means your browser contacts fonts.googleapis.com and fonts.gstatic.com, and those requests carry your IP address as any web request does. Google states it sets no cookies for these. Self-hosting the fonts would remove even that, and it is on the list.
Checking any of this
You do not have to take our word for it. Open your browser's developer tools on any page of this site, look under Application → Storage, and you will find one entry if you have used the theme toggle and none if you have not. Cookies will be empty.
Changing your mind
There is no consent to withdraw, because none was collected. To remove the theme preference, clear this site's data in your browser. To stop analytics entirely, enable Do Not Track or Global Privacy Control — the script then never loads. Blocking eu.i.posthog.com in an extension has the same effect and breaks nothing.
If we ever adopt something that does require consent, this page changes first and a banner appears with it. It will not happen quietly.
Questions
Write to support@devsweep.app. If you are in the EU and you think we have got this wrong, you may also complain to your national supervisory authority; in Portugal that is the CNPD.