Cookie Notice
Silo — app.silo.day and www.silo.day
Silo uses a small number of cookies, all of which are strictly necessary to run the service. Most are set by Silo itself; one is set by Cloudflare, the CDN and security provider that sits in front of the site. We don't use advertising or third-party tracking cookies. Our usage analytics is privacy-friendly and cookieless — we self-host Plausible on our own server, so it sets no cookies and never tracks you across other sites (see the Privacy Policy for what it measures).
Browsing www.silo.day sets no cookies at all. They're set only if you open the "Start free" form and begin creating an account there — at that point the same session and CSRF cookies below are set, because the form talks directly to the app rather than sending you to it. They're set for .silo.day so they work across both addresses.
| Cookie | Purpose | Duration |
|---|---|---|
| Session cookie (Laravel Sanctum) | Keeps you logged in between requests | Session / until logout |
| CSRF token | Protects against cross-site request forgery | Session |
oauth_state |
Set only during a "Sign in with Google/Apple" redirect; ties the sign-in back to your browser to prevent login CSRF | A few minutes, cleared when sign-in completes |
oauth_connect_state |
Same protection when connecting a third-party account (Xero, FreeAgent, Google Drive, OneDrive, Dropbox, calendars) from your settings | A few minutes, cleared when the connection completes |
__cf_bm (Cloudflare) |
Set by Cloudflare, our CDN and security provider, to tell human visitors apart from bots and protect the service from automated abuse. It doesn't identify you or track you across other sites | ~30 minutes |
Because these cookies are strictly necessary for the service to function (authentication and security), we don't show a cookie consent banner — this is consistent with the UK's cookie rules for strictly-necessary cookies, including those used to facilitate login and prevent fraud.
Our usage analytics (self-hosted Plausible) sets no cookies, so it doesn't add anything to the table above. If we ever add non-essential cookies, we'll update this notice and, where required, ask for your consent first.
Questions: [email protected].