Cookies

If you stay a guest, Shorthunt sets one HttpOnly cookie named sh_device. It holds a random device id so the free find is counted once on that browser. The cookie stays on this site.

If you sign in, Supabase Auth sets its own HttpOnly session cookies on this site. They keep you signed in. Shorthunt does not use them to follow you across other sites.

Find and the magic-link form send a Cloudflare Turnstile token. Cloudflare may set a cookie for that check. Cloudflare's notice is at https://www.cloudflare.com/privacypolicy/.

Shorthunt does not set an advertising cookie in this version.

Last updated November 13, 2026.