Cookie policy
The short version: we don't use cookies. Not first-party, not third-party, not "essential" ones, not analytics, not ads. Whisper doesn't set a single cookie anywhere — this site, the app, or the API.
There's no login, so there's no session to keep alive. There's no analytics or advertising, so there's nothing to track you across visits with. A note's decryption key lives only in the URL you were given, never in a cookie or in browser storage we control. If a page here ever needs local state (e.g. remembering you copied a link), it stays in memory for that page load and disappears on refresh — never written to disk.
Every HTTP request — cookie or not — inherently carries a User-Agent header and comes from an IP address; that's a property of the internet, not something we set or read via a cookie. See the privacy policy for exactly how little we do with either of those.