Cookie policy
Effective 2 November 2026
bananana.dev uses only the cookies it needs to sign you in and keep you safe. There are no advertising, analytics or social-media cookies, and no third-party scripts on bananana.dev or on your brain's pages. Because every cookie here is strictly necessary, there's no cookie banner; blocking them stops sign-in from working.
On bananana.dev
| Name | What it does | How long |
|---|---|---|
__Host-bananana_account | Keeps you signed in to your bananana.dev account. | Until you close the browser or sign out; the session itself ends after 12 hours unused or 7 days |
__Host-bananana_oauth | Protects a Google or Apple sign-in while it's in progress (proves the answer belongs to the request you started). | 10 minutes |
On your brain (name.bananana.dev)
Your brain runs on your own machine and sets its own cookies; CTF Designs doesn't receive them.
| Name | What it does | How long |
|---|---|---|
__Host-bananana_session | Keeps you signed in to the brain. | Until you sign out, 24 hours unused or 7 days |
__Host-bananana_oauth | Protects a Google, Apple or bananana.dev sign-in while it's in progress. | 10 minutes |
__Host-bananana_firstrun | Holds the first-run setup together while the Owner creates the brain's first account. | Until setup finishes |
Stored in your browser
Your brain's pages keep a few settings in your browser's local storage, which never leaves your device: the look you chose (light or dark), the device you had open last, your recent searches, which AI assistant conversation was open, the Desktop page's settings and whether hidden files are shown. An invitation link keeps the invited address in session storage until the tab closes.
Set by Cloudflare
Cloudflare, which delivers bananana.dev and the brain addresses, may set a security cookie (such as __cf_bm or cf_clearance) to tell people from bots. It contains no personal information and isn't used for tracking. See Cloudflare's cookie list.
The apps
The iPhone, iPad and Android apps show bananana.dev and your brain in a web view, with the same cookies as above, kept inside the app. Signing out in the app clears them.
Changes and questions
We'll update this page if we add a cookie. Questions: roman@ctfdesigns.com. More in the privacy policy.