Cookies & Storage
Last updated 2 October 2026
Mesh uses browser storage to keep you signed in and to stop spam. There is no advertising or analytics tracking.
The short version
Mesh sets no advertising cookies and no analytics cookies. There is no third-party tracking on this site, and nothing here follows you to other websites. Fonts are served from Mesh itself rather than a font service. The one outside service every page contacts is Google reCAPTCHA, a security check described below.
What we do store is the minimum needed to keep you signed in and to stop the same message being posted a hundred times a second.
Exactly what is stored
- Your sign-in session
- Firebase Authentication stores a session token in your browser so you are not asked to sign in on every page load. Clearing it signs you out. Choosing 'Keep me signed in' stores it until you sign out; leaving it unticked stores it only until you close the tab.
- Anti-spam timers
- A timestamp and your last post's text, stored locally under keys beginning 'mesh:', used to enforce the posting cooldown and catch duplicate posts. These never leave your device.
- Recent searches
- Your last few searches, stored under 'mesh:recent-searches' so they're one tap away. Kept on this device only, never sent to us, and cleared by the Clear all button in Search.
- Storage notice
- One key, 'mesh:storage-notice', remembering that you've dismissed the notice about this storage.
- Update reload
- One key in session storage, 'mesh:reloaded-for-update', set when Mesh reloads itself into a newer version, so it only does that once. Cleared when you close the tab.
- Interests prompt
- One key per account, beginning 'mesh:asked-interests:', so the 'pick your interests' screen only appears once on this device. Your interests themselves are saved to your account, not here.
- Appearance
- One key, 'mesh:appearance', holding the theme, text size, motion and video settings you chose in Settings, so this device keeps them. Kept on this device only.
- Profile photo reminder
- One key per account, beginning 'mesh:photo-nudge:', remembering that you dismissed the reminder to add a profile photo. Kept on this device only.
- Second looks
- One key, 'mesh:second-look', listing photo posts with several photos that you scrolled past without looking through, so next time they open on their second photo. It holds post ids and times only, for a week at most, and never leaves your device.
- Drafts
- Keys beginning 'mesh:draft:' hold the words of a post or message you started but didn't send, so closing the composer or switching chats doesn't lose them. Photos and videos aren't kept. Kept on this device only, for a week at most, and deleted when you send, discard or sign out.
- Google reCAPTCHA
- Loaded on every visit by Firebase App Check to tell real visitors from scripts, and again if you request an SMS code. Google sets its own cookies for this. It's a security measure: it isn't used for advertising, and Mesh receives only a pass or fail.
Why there is no consent banner
Consent requirements under EU and UK rules apply to storage that is not strictly necessary, such as analytics, advertising and profiling. Mesh has none of those, so there is nothing to ask you to opt into.
The items above are either strictly necessary to provide a service you asked for, or are security measures. We tell you about them here rather than interrupting you with a banner that has no meaningful choice behind it.
If we ever add analytics or any non-essential storage, we will ask first, and it will be off until you say yes.
Controlling it
Your browser settings can block or clear all of this. Blocking storage for this site will sign you out and keep you signed out.
Signing out from Settings → Account → Sign out clears your session on this device.