Privacy is the product.
So this page is short — there's very little to confess.
Cookies — exactly two, and only if you sign in
Browsing this site sets no cookies at all. Signing in sets two, both
ours, both locked to liir.net over HTTPS:
__Host-liirsess — your session: a random token that signs you in.
Page scripts can never read it, and the registry stores only a hash of it.
It lives 30 days, or until you sign out.
__Host-liirin — the word “1”, nothing else. It lets our
own pages show the signed-in header without asking the server first. It
identifies nobody.
There is no cookie banner because the law asks consent for cookies that
track you. Neither of these tracks anything, and no one else's
cookies exist here.
Traffic, counted without you
We count visits on our own server: the page asked for, the moment, and the page that linked here. The counter never records your IP address, and cookies are stripped before a line is written — the traffic log cannot hold your session even by accident. To avoid counting you twice in one day, the server briefly mixes your connection's address with a key that lives only in memory and dies at midnight — what reaches disk is a number, never the address. No analytics service, no pixels, nothing loaded from anyone else's servers. The examples on /hub are drawn entirely in your browser — nothing you do there is sent anywhere.
Your account
An account is exactly three things: the name you claim, the public half of your passkey (useless without the private half, which never leaves your device), and whatever you choose to publish — each piece behind a dial you set. It all lives on hardware we own, not in someone's cloud. Signing out deletes the session on the spot.
Never
No ads. No trackers. No data brokers. No selling, renting, or “sharing with partners.” You're the customer, not the product — Liir answers to the people who use it, no one else.
Questions
Write to hello@liir.net. A person reads it.
This page is the whole policy. If it changes, this date changes: August 18, 2026.