What hermod keeps about you

The live demo sets a single cookie, and only after you pass Cloudflare's human check there. It holds when your pass ends and a signature, so it can't be forged, and nothing else: no id, nothing about you. Your browser keeps it for an hour, scripts on the page can't read it, and it's sent only to hermod's API.

Without it, the demo's stream couldn't tell a person from a bot holding its connections, so it's necessary, and there's no banner asking about it. The rest of the site sets no cookies.

hermod's API uses it while you're connected, in memory only, to limit how many streams and requests one address can have at once, and passes it to Cloudflare with the human check. It doesn't log your requests or store your address.

This site remembers your light or dark choice, and when your pass ends, so it knows when to ask again. Both stay in your browser until you clear them.

The pages are served by Vercel. Cloudflare carries the requests to the API and runs the human check (Turnstile), and the map tiles come from OpenFreeMap. Each handles your requests under its own privacy policy.

Get in touch and I'll answer.