Placeholder footage, not the brothers
The boring kind of cookie
Potato and Hash were thrilled when they heard this page was about cookies. They are less thrilled now. These ones are small computer files and nobody can eat any of them.
A cookie is a tiny piece of text a website asks your browser to keep on your device, so it can read it back later. Cookies are usually used to remember that you are signed in, to hold a shopping basket together, or to count visitors.
Some are needed for a site to work at all. Some watch how people move around a site. Some follow people across the wider internet to sell them things. They are not the same thing at all, so this page keeps them apart.
Today this site is mostly pictures and videos of two very wrinkly brothers, a contact form and a newsletter signup. It runs no advertising and no analytics, and there is nothing here set up to follow you to other websites.
The site is hosted on Cloudflare. Messages and newsletter signups are saved in a Cloudflare database. Our email goes out through a company called Resend, from info@potatoandhash.com. Sending an email does not put anything on your device.
Owner suppliedWhether any Cloudflare security feature that stores something in a visitor's browser has been switched on for this site. Cloudflare offers several, they are off by default, and nobody has confirmed the setting, so this page does not claim either way.
The contact form and the newsletter signup are protected by Cloudflare Turnstile. Its job is to tell a person apart from a script, which is what keeps the inbox usable. It is the only piece of another company's code that runs in your browser on this site.
Turnstile looks at signals from your browser to make that decision. Whether it stores anything on your device while doing so is Cloudflare's behaviour rather than ours, and Cloudflare's own documentation is the authority on it.
Owner suppliedA check of what Cloudflare Turnstile stores in the browser for this site, so this section can say it exactly rather than describe it in general. Until that is done, nothing specific is claimed.
No advertising. No analytics. No profile of you anywhere.
None. Not one. This site sets no cookie of its own, and it stores nothing in your browser using local storage or session storage either. That is not a promise about intentions, it is a fact about the code, and it is checked by searching the whole source for every way of doing it.
Also none. The site is hosted by Cloudflare, and some of their security features do store something on a visitor's device, so this page used to say that two of them might appear here.
It has since been checked against the live site rather than guessed at. Every page was requested, including both forms, and not one of them sent a cookie back. Checked on 8 August 2026.
If that ever changes, these are the two that would show up, so you know what you are looking at: __cf_bm (tells automated traffic apart from people) and cf_clearance (records that a challenge has already been passed, so it is not shown again).
The one piece of somebody else's code that runs on this site is the bot check on the two forms, which is Cloudflare's. It loads inside its own frame, so anything it stores belongs to Cloudflare in Cloudflare's own context rather than to this site, and it is there to tell a person apart from a script. It is not analytics, it is not advertising, and it is not following you anywhere.
There is no analytics on this site. No measurement code is installed and no measurement account is connected. Nothing is counting pages, visits or videos.
If that ever changes, here is what would change with it, written down now so it cannot quietly happen later.
This page would be rewritten on the day it happened, so it always matches what the site really does.
Customer accounts, a merch store and personalized video requests are planned and none of them exist. If they arrive, some cookies become strictly necessary, meaning the feature simply cannot work without them.
Strictly necessary cookies do not follow you around other websites and are not used for advertising. Because the feature cannot run without them, they are not something we could offer as a choice. Your choice is whether to use that feature at all.
You are always in charge of what sits on your own device. Every major browser lets you see what a site has saved, delete it, and block more. The wording changes between browsers, but the path is usually the same.
A private window is another simple answer. Anything made in that window is thrown away when you close it.
One fair warning. If you block every cookie everywhere, some websites stop working properly. On this site, blocking everything would one day mean you could not stay signed in or finish a purchase. Watching a Shar Pei fall off a sofa will keep working perfectly.
When the site changes, this page changes with it. If analytics is switched on, or accounts and the store open, the sections above get rewritten to describe what is really happening. We are not going to quietly add tracking and hope nobody notices.
Owner suppliedThe date this policy takes effect, and how visitors will be told when it changes. Left blank rather than guessed.
Not legal adviceWhether a site needs a consent banner, and what it must say, depends on where the business is and where its visitors are. Neither has been established here. This page describes what the site does. It is not a compliance claim and has not been reviewed by a lawyer.
If anything here is unclear, or you want to know what one particular thing in your browser is doing, please write to info@potatoandhash.com. A real person reads it, usually with a dog asleep on their feet.
The rest of the paperwork