Legal

Cookies

Last updated: 25 September 2026

TheFakto keeps only what the site needs to work. We run no advertising network, no analytics that follow you around the web, and we never sell or share what we store. This page lists everything that ends up on your device, and explains why there is no consent banner. It goes with the Privacy Policy, which covers what we hold on our own servers.

1. What we store in your browser

Your sign in. A cookie named __Host-tf_s holds a random token that tells our server you are signed in. It contains no personal data, only the token. It lasts until you sign out, or up to thirty days if you chose to stay signed in. It is set by us, on our own domain, and it is marked so that it cannot be read by scripts or sent to other sites.

The closed beta gate. A cookie named __Host-tf_gate remembers that you passed the entry check while the site is not open to everyone. It disappears when the site opens publicly.

Your settings. Your browser stores small preferences locally, such as whether videos start on their own, whether sound is on, your chosen language and which panels you closed. These are not cookies and they are not sent with every request. They stay on your device, except when we save them to your account so that you have them on another computer.

That is the whole list for TheFakto itself. If we ever add another item, it appears here before it appears on your device.

2. Things other companies set, and when

Three services we depend on can write something to your device. We are telling you about them because a list that leaves them out would be misleading.

Cloudflare. The whole of TheFakto runs on Cloudflare, and Cloudflare protects it from attacks and from bots. When it checks a request, or when the Turnstile check on sign up runs, Cloudflare may set its own strictly necessary security cookie. It exists to tell a human from an attack tool. It is not used for advertising and does not build a profile of you.

Stripe. When you buy a paid feature you are on Stripe's payment page, and Stripe sets its own cookies there to process the payment and stop card fraud. That happens under Stripe's own policy, on Stripe's own domain.

Didit. When you go through identity verification you are in the verification flow of our provider Didit, which needs its own session storage to run the check. Again, its own policy applies to that step.

What none of these do is follow you to other websites for advertising.

3. What we do not use

No advertising cookies. No third party trackers. No Google Analytics, no Meta pixel, no TikTok pixel, no fingerprinting, nothing that follows you to other websites. No profiling for advertising, because there is no advertising on TheFakto. We do not sell or share what is stored on your device, and we do not join it with data from other companies.

4. Why we do not ask for consent

Under Article 5(3) of the ePrivacy Directive and Section 89(3) of Czech Act No. 127/2005 Coll. on electronic communications, consent is needed for storage on your device unless that storage is strictly necessary to provide the service you asked for, or is needed purely to carry out the transmission.

Everything in section 1 falls inside that exception. Without the sign in cookie you cannot stay signed in. Without the gate cookie the closed beta cannot let you back in. Your local settings are the settings you yourself chose. The security cookies in section 2 are there to keep the service standing up. None of it is analytics, none of it is advertising, and none of it is optional extra data collection, so Czech law does not require a banner and we do not put one in your way. We tell you here instead, because you should know what is on your device.

If we ever add anything that is not strictly necessary, such as analytics, we will ask you first with a real choice. Saying no will be as easy as saying yes, and refusing will not cost you any part of the service.

5. How to see it and how to remove it

Signing out deletes your sign in cookie. Clearing site data for thefakto.com in your browser removes everything in section 1. Every major browser also lets you block cookies entirely, and lets you see exactly what a site has stored, usually under Settings, then Privacy.

If you block our cookies, the site still loads, but you will not be able to stay signed in, and your local settings will start fresh each time. That is the trade, and it is your call.

6. Is a cookie personal data?

The sign in token is linked to your account, so while you are signed in it is personal data and the Privacy Policy applies to it. We keep it because we need it to perform our contract with you, and we keep security data because we have a legitimate interest in not being overrun by bots and attackers. Your rights over that data, including the right to a copy and the right to complain to the Czech data protection authority, are set out in the Privacy Policy.

7. Questions

Write to honzastegner19@gmail.com, in English or Czech. See also the Terms of Service, the Rules and the Privacy Policy.