Cookie Policy
Version 1 · Last updated 30 September 2026.
Peridot has no advertising. It uses Google Analytics only if you accept it in the banner; everything else on this page is needed for the site to work. (Drafts you save are kept with your account, not in your browser.) This page lists everything the site keeps in your browser so you can see exactly what it is.
What is stored
| Item | Set by | Purpose | Lasts |
|---|---|---|---|
firebase:authUser:… (IndexedDB) and related keys | Firebase Authentication | Keeps you signed in between visits. | Until you sign out |
peridot.theme | Peridot | Remembers whether you chose the light or dark theme. | Until you clear site data |
peridot.spoilers | Peridot | Remembers whether spoilers show only when clicked or always (Settings, Show spoilers). | Until you clear site data |
peridot.nav | Peridot | Your name, handle, and avatar picture, so the sidebar shows them before sign-in finishes. | Until you sign out |
peridot.viewed.… (session storage) | Peridot | So a post's view count only goes up once per visit. | Until you close the tab |
peridot.loc (session storage) | Peridot | So your sign-in location is looked up once per visit, not on every page. | Until you close the tab |
peridot.filters | Peridot | The filters you set on the Home feed (categories, post type), until you clear them. | Until you clear the filters |
peridot.cache.… (session storage) | Peridot | The lists of categories, tags, people, and badges (staff and parody accounts), so moving around doesn't download them again. | Five minutes, or until you close the tab |
peridot.legal | Peridot | Remembers that you accepted the current Terms of Service, Privacy Policy, and Cookie Policy, so the site doesn't check again on every visit. | Until you clear site data |
peridot.sweep (the operator only) | Peridot | When the daily clean-up of expired moderation records last ran in the operator's browser. | Until site data is cleared |
peridot-consent | Peridot | Remembers your answer to the analytics banner. | A year, then it asks again |
firebase-app-check-… (IndexedDB) and Google's _GRECAPTCHA entry | Firebase App Check and reCAPTCHA Enterprise (Google) | Tell Firebase that a request to sign in comes from a real browser on this site, not a script. Needed for sign-in to be safe; there is no puzzle to solve. | Hours to a few months |
_ga and _ga_5Z61KQ95ZG (only if you accept analytics) | Google Analytics | Tell visits apart so pages and features can be counted. Set for krysion.com. | Up to 2 years |
emoji-picker-element-… (IndexedDB) | The emoji picker | The emoji list and the ones you use most, so the picker opens quickly. | Until you clear site data |
peridot-… (Cache Storage) | Peridot (its service worker) | Copies of Peridot's own pages and scripts, the code libraries and fonts they use, and recently seen post pictures, so the installed app opens quickly and recent posts stay readable without a connection. | Until a newer release replaces them (post pictures: the newest 120), or you clear site data |
firestore/… (IndexedDB) | Firebase (Cloud Firestore) | A copy of the posts, profiles, and replies that were opened, and, for a signed-in member, their own notifications and drafts, so recent posts stay readable without a connection. It is removed when the member signs out. | Until you sign out, or clear site data |
peridot.push and firebase-messaging-database (IndexedDB) (only if push is switched on) | Peridot, and Firebase Cloud Messaging (Google) | Remember that this device has push notifications on, and hold the address Google's push service gave it. | Until push is switched off or you sign out |
peridot.wipe | Peridot | Marks that the copy above still has to be removed after a sign-out (another tab had it open). Removed as soon as that is done. | Seconds |
Who sets these
- Firebase (Google) sets the sign-in items above, and no advertising cookies.
- reCAPTCHA Enterprise (Google) runs invisibly on every visit, because it protects sign-in. It is not used for advertising.
- Google Analytics (
googletagmanager.com,google-analytics.com) loads only after you accept. Advertising features and Google signals are switched off. - YouTube videos embedded in posts load from
youtube-nocookie.com, YouTube's privacy-enhanced mode, and only when a post contains one. - Hermes (
hermes.nisaka.eu, the operator's own file server) and KLIPY (api.klipy.com,static.klipy.com) set nothing in your browser. - Krysion (krysion.com, the operator's own site) serves the typeface, the footer, and the banner; it sets nothing except your answer to the banner.
- cdnjs serves the icons and a few libraries, and sets nothing.
- jsDelivr serves a few libraries and the emoji list, and sets nothing.
What these services receive when they are contacted (for example your IP address), what Peridot does with it, and why, is in the Privacy Policy.
Your choices
Analytics is the only optional item. Declining it, or never answering, keeps every Google Analytics script and cookie off, and Peridot works exactly the same.
Signing out removes the sign-in items. Clearing this site's data in your browser removes everything else.
Questions? Write to hello@krysion.com. See also the Privacy Policy and the Terms of Service.