A short list, written from what the code does: one sign-in cookie, one stored preference, cookieless aggregate traffic counting, and a payment page that belongs to our provider. No advertising or tracking cookies are used.
This page lists the cookies and browser storage that subchinese.com actually uses. It covers the sign-in session, the cookie-preference choice, and what happens when you are sent to our payment provider to pay. It does not describe cookies set by sites we do not control.
Name: subchinese_session. It is set when you sign in and holds a session token so the site knows which account is making a request. It is HttpOnly (JavaScript on the page cannot read it), Secure (only sent over HTTPS), SameSite=Lax, and it expires after the session lifetime or when you sign out. Without it you cannot stay signed in, so it cannot be switched off while you use an account.
When you answer the cookie banner we store the answer in your browser under the key subchinese_cookie_consent, using localStorage. It never leaves your device and it is not sent to us with requests. Clearing site data removes it, and the banner will appear again.
Paid plans are billed through Paddle, which acts as the merchant of record. When you continue to checkout you leave subchinese.com and land on a Paddle-hosted page; any cookies set there belong to Paddle and are covered by Paddle’s own cookie and privacy notices. We do not receive those cookies and cannot read them.
We do not run third-party advertising cookies, cross-site tracking pixels or affiliate trackers on this site, and we do not build advertising profiles. Cookies set by our own pages are limited to the one that keeps you signed in.
Page views are counted with Cloudflare Web Analytics, a cookieless service that receives the page address, the referring site and basic device and country information, and sets no cookies and no persistent identifier. It cannot recognise you across sites or across visits, and it is not used for advertising. On top of that there is a first-party visit log written to our own database (page path, referring site, campaign parameters, country, device, and whether the visitor is signed in). That log is off by default and only runs if you press Accept in the banner; if you press Reject or ignore the banner, nothing is written to it. Neither of these records IP addresses in readable form or stores the content of your uploads.
You can delete cookies and site data from your browser settings, and block third-party cookies entirely — the tool keeps working, but you will be signed out and the banner will reappear. Blocking all cookies also prevents staying signed in between visits. Most browsers let you allow cookies per site, which is the setting we would suggest if you want the account to persist.
If we add a cookie or a third-party script, this page is updated in the same release and the change is listed in the sections above rather than described in general terms. Questions about anything here can go through the Contact page.