Cookies and browser storage
Every cookie anonyvpn.app sets, and what else it keeps in your browser (nothing).
1. Cookies anonyvpn.app sets
Both are strictly necessary for signing in, so they need no consent; there is no cookie banner.
| Name | Purpose | Set | Lifetime |
|---|---|---|---|
__Host-anonyvpn | Keeps you signed in to anonyvpn.app. Holds a random value; our database keeps only a hash of it. Secure, HttpOnly, SameSite=Lax. | When you sign in. Removed when you sign out. | 30 days |
__Host-anonyvpn-auth | Ties a sign-in with your AnonyID to this browser: the sign-in request's random state, nonce and PKCE verifier, encrypted. Secure, HttpOnly, SameSite=Lax. | When you start signing in. Removed when you come back from account.anonylabs.com. | 10 minutes |
2. Other browser storage
- The site stores nothing in your browser's local storage, session storage or IndexedDB.
- When you add a device on the website, your browser makes the device's key pair in memory and puts the private key into the configuration it shows you; it is not stored in the browser or sent to us.
- The forms carry a security token in the page itself, not in a cookie.
3. What there is not
No analytics, advertising or tracking cookies, and no content from other sites: every script, style, font and image comes from anonyvpn.app.
Signing in happens at account.anonylabs.com, which sets its own cookies, described in the AnonyID privacy notice.
Changes to this page
- Version 2026-10-09.1: First version.