Cookie Policy
Effective 23 September 2026 · version 1.0
> Language. This English text is the authoritative version. We publish it in Türkçe, Deutsch, Nederlands, Polski, Português (Brasil) and Español so that you can read it in the language you use the site in. Those translations are provided for your convenience; if a translation and this English text disagree, this English text governs. That does not take away the protection of the mandatory consumer and data protection rules of the country where you live. You may write to us in any of those languages and we will answer in the same one.
1. The short version
We store nothing on your device when you open rasterless.com. No cookie of ours, no local storage entry, no database — nothing, on any page, in any language. We checked this on the live site rather than assuming it, and the page contacted no third-party server at all while we watched. We re-checked this against the live response headers, on five separate requests, after an earlier draft of this page assumed our CDN set a bot-management cookie: it does not.
Storage only appears once you do something that requires it: change the theme or the language, sign in, or download a file. Everything listed in section 3 is there to carry out something you asked for. There is no advertising, no analytics, and no tracking of any kind.
2. What this policy covers
A cookie is a small file a site stores on your device. The same legal rules cover the equivalents — local storage, session storage and IndexedDB — so this page covers all of them and calls them "storage".
3. Everything we store, and when
| Name | Kind | Set by | Why | How long | |---|---|---|---|---| | *nothing* | — | — | On page load we store nothing at all. This row is the normal case. | — | | theme | local storage | rasterless.com | Remembers whether you chose light or dark. Written only when you use the theme control. | Until you clear site data | | lang | local storage | rasterless.com | Remembers your interface language. Written only when you use the language selector. | Until you clear site data | | firebase:authUser:… | local storage and IndexedDB | Firebase Authentication (Google) | Keeps you signed in so you can download, and so we can apply the signed-in quota of 60 per hour and 300 per day. The Firebase code is not even loaded until you click sign in. | Until you sign out or clear site data | | aid | cookie on api.rasterless.com | our API | Counts your conversions against the anonymous quota of 10 per hour, so the free tier works without an account. Set when you convert, never when you merely visit. | One hour, matching the quota window it counts |
Not present: no Google Analytics, no Meta pixel, no advertising identifier, no A/B testing cookie, no session recording, no cross-site identifier, and no storage set by any party other than the ones named above. When we inspected the live site, the page contacted no third-party origin at all on load.
The Turnstile bot check is not live yet. We are adding a Cloudflare Turnstile challenge to protect the free quotas. It does not run today: the widget is not active on the site, and nothing from challenges.cloudflare.com is loaded. When it goes live it will set its own short-lived storage, and we will update this table and the date at the top before it starts running, not after. Our Terms of Service and Privacy Policy say the same thing, so if you ever find them disagreeing, the more restrictive reading is the one we will hold ourselves to.
4. Why we do not show a cookie banner
Under Article 5(3) of the ePrivacy Directive (2002/58/EC), as transposed into the national law of each EU country — in the Netherlands, where we are established, article 11.7a of the Telecommunicatiewet — consent is not required for storage that is strictly necessary to provide the service the user has explicitly requested, or that is used solely to carry out a transmission. The European Data Protection Board's guidance on the technical scope of Article 5(3) confirms that reading. The same exemption exists in the United Kingdom under regulation 6(4) of PECR.
Everything in section 3 is in that category, and the ordinary visit is easier still: nothing is stored, so there is nothing to consent to. The theme and language entries record a choice you made by making it. Sign-in storage is necessary because downloading requires an account. The quota counter is necessary to keep a free service standing up: without it the free tier is an open endpoint that the first script drains.
In Türkiye the KVKK sets no separate cookie-consent rule either. Storage that is necessary to deliver the service you asked for rests on KVKK art. 5/2-(c) — necessity for the performance of a contract — and the quota counter on art. 5/2-(f), our legitimate interest, balanced against your fundamental rights as that provision requires.
In Brazil the analysis is different, because the LGPD sets no separate cookie-consent rule. There the question is only which legal basis applies: the sign-in storage rests on Art. 7, V (performing the service you asked for) and the quota counter on Art. 7, IX (legitimate interest), read with Art. 10. The ANPD's guidance on cookies takes the same view of strictly necessary cookies.
A banner would be required if we used storage that was merely useful to us — analytics, advertising, profiling, cross-site tracking. We use none. If that ever changes we will ask you first, before setting anything, and we will change this page before we change the site.
5. What we do not do
- No advertising cookies and no ad networks.
- No third-party analytics. The site contains an inert analytics hook that is switched off and loads no script; if we ever switch it on it will be a cookieless, privacy-preserving product, and this page will say which one before it runs.
- No cross-site tracking, no profiling, no fingerprinting.
- No selling or sharing of any data, from storage or otherwise.
- No storage set by anyone other than the parties named in section 3.
6. Controlling it yourself
Every major browser lets you block or delete cookies and site data. Because we store nothing on a plain visit, blocking storage costs you very little:
- Blocked, not signed in: the site works. You can convert and preview at the anonymous quota of 10 conversions per hour. You will lose your theme and language choice on each visit.
- Blocked, signing in: sign-in will fail, and downloading needs an account, so you will not be able to download.
7. Where your data goes
What this storage means for your personal data — the legal basis, who processes it, transfers outside the EU, how long it is kept and your rights — is set out in our Privacy Policy.
8. Changes
If we change what we store on your device, we change this page and the date at the top before the change reaches the site, not after.
9. Contact
- Anything about this page, and any data protection request: [email protected]
- General enquiries: [email protected]
---
What changes when the company exists
Nothing on this page depends on the company. The two changes already scheduled are the Turnstile row in section 3, on the day the bot check ships, and a named analytics product in section 5 if we ever adopt one.