Privacy
Fortune Cookie runs in your browser. There are no accounts and no database for your message.
What’s in the link
When you share a cookie, the fortune text is carried in the URL itself (the hash after #). Anyone who has the link can open it and read the fortune after they crack the cookie. The same URL is visible in browser history, chat logs, and anywhere the link is pasted.
This is not encryption and not secrecy. Encoding in the hash only keeps the fortune out of ordinary server request logs and out of link-preview / Open Graph tags (those stay generic). It does not hide the message from people who have the link.
What we don’t store
We don’t receive or keep your fortune on a server. Cracking, copying a link, and saving a slip image all happen on your device. The slip PNG is created locally if you choose Save slip.
Language filter
Custom fortunes are checked in the browser with a local PG-oriented filter (shared with Still Have It). It is a courtesy for friendly wording — not a safety certification, age gate, or guarantee that every message is appropriate.
Hosting
This site is served through a Tailscale Funnel to our server. The service and server may keep ordinary request and security logs (for example IP address, URL path without hash, user agent, timestamps) for operations and abuse prevention. We do not add analytics or advertising scripts on this cantrip.
Fortune Cookie · 10hi · Cantrip Studio