Legal
Cookie Policy
Exactly what FreeMock stores on your device, what each item does, and what breaks if you remove it.
In short
We store what is needed to keep you signed in, plus the keys that decrypt your own messages. We do not currently run any advertising or tracking cookies. If that changes, we will ask before setting one.
What we store today
Sign-in tokens — required
When you sign in we store an access token and a refresh token. The access token proves who you are on each request; the refresh token gets you a new one when it expires, so you are not signed out every few minutes.
They expire on their own and are cleared when you sign out. Without them there is no way to stay signed in, which is why they are not optional.
Preferences — required
Small settings such as your chosen language, so the app behaves the same way next time you visit.
Message encryption keys — stored on your device
Direct messages are end-to-end encrypted, and the keys that decrypt them live in your browser's local storage. They are never sent to us, which is what makes the encryption meaningful.
Clearing your browser data destroys these keys, and messages encrypted for them cannot be recovered — not by you, and not by us. This is the trade that comes with real end-to-end encryption.
Advertising
We do not show ads today. If we introduce them, the ad provider would set its own cookies to count how many people saw an ad and to avoid showing the same one repeatedly.
Where the law requires consent — in the UK and EU, for instance — we will ask before any advertising cookie is set, and you will be able to say no and keep using FreeMock normally.
Analytics
Our wallet provider collects usage analytics about wallet interactions as part of its service. This tells them how their product is used; it is not used to build an advertising profile of you.
Controlling what is stored
Every browser can block or delete cookies and site data, usually under privacy settings. Two consequences worth knowing before you do:
- Blocking our sign-in cookies means you cannot stay signed in — that is precisely what they do.
- Clearing site data removes your local message keys, permanently.
Changes
If we start using a new kind of cookie, this page will say so before we do, and the date at the top will change.