Cookie Policy
Last updated: 8 September 2026
Graze sets two cookies. Neither is used for tracking, advertising, or analytics, and neither is shared with anyone.
The cookies Graze sets
1. Session cookie (strictly necessary)
Set by NextAuth when you sign in, and it is what keeps you signed in as you move between pages. It holds a signed token identifying your account. Without it, signing in would not be possible, so it is exempt from consent requirements — there is no version of an account system that works without one.
It is deleted when you sign out, and expires on its own if you don't.
2. graze_low_bandwidth (preference)
Set only when you switch on low-bandwidth mode, which stops the illustrated background being sent to your browser at all. It stores a single character — 1 or 0 — and lasts a year.
It is a cookie rather than browser storage for a specific reason: the server has to know before it builds the page, or the illustration would already have been sent before it could be hidden, which would defeat the point. It records a choice you made by clicking a button, contains nothing about who you are, and is never sent anywhere except back to Graze.
Things stored in your browser (not cookies)
These stay on your device and are never transmitted to Graze or anyone else:
- Reading preferences — your chosen text size and whether you turned on the dyslexia-friendly font.
- A dismissal flag so the low-bandwidth suggestion doesn't reappear after you close it.
- Which papers you opened a summary for during the current tab session, so a later click to the source can be counted correctly. Cleared when you close the tab.
Clearing your browser's site data removes all of these.
What Graze does not use
There are no analytics cookies, no advertising cookies, no tracking pixels, no social-media buttons, no embedded third-party scripts, and no iframes anywhere on this site. Graze does not use Google Analytics or any equivalent, and does not build a profile of you. Nothing you do here follows you to another website.
Because the only cookies are one that is strictly necessary and one that records a setting you chose yourself, a consent banner blocking the site is not required. The small notice in the footer is there so you know what is set anyway.
Turning them off
You can block or delete cookies in your browser settings. Blocking the session cookie means you will not be able to sign in; everything readable without an account will still work. Low-bandwidth mode can be switched off from the toggle at the bottom of any page.
If this changes
If analytics or any third-party embed is ever added, this page will be updated and such cookies will be set only after an explicit opt-in — never on by default. Questions: grazeoutreach@gmail.com. See also the Privacy Policy.