Cookie Policy

1Summary

This policy covers firstmove.energy. In short:

• First Move sets one cookie, NEXT_LOCALE. It remembers your language and contains no personal data.
• Your settings and projects are kept in your browser's storage (localStorage, sessionStorage and IndexedDB), not on a server. There are no accounts and no server database, so we never receive this data.
• Everything is first-party, stays on your device and is used only to provide the service you asked for.
• No analytics, no advertising, no tracking and no third-party cookies on the website. E-mails we send are covered separately under E-mail tracking.
• Because all of it is strictly necessary, we do not ask for consent. There is nothing to accept or reject.
• Clearing your browser data deletes your projects, so export them first (Delete or block).

2What we store in your browser

The table lists every cookie and storage entry First Move uses. All of them are first-party: they belong to firstmove.energy and stay in your browser.

‘Until deleted’ means the entry stays until you or the app delete it, or your browser clears it. The assistant entries exist only once you set up the AI assistant, and first-move:sidebar only once you collapse the sidebar.

To check that storage works, the app briefly writes a test entry, first-move:probe, to localStorage or sessionStorage and removes it straight away.

The app also asks your browser to keep this storage persistent (navigator.storage.persist()), so the browser is less likely to clear your projects on its own. Your browser decides whether to grant this.

In Chromium-based browsers you can link a project to a file on your disk (File System Access API). The browser then keeps a handle to that file in the file-links store. The file stays on your disk, and nothing is uploaded.

3The language cookie

NEXT_LOCALE is the only cookie First Move sets. It holds the language code en or de and nothing else. It applies to the whole site (path /) and is set with SameSite=Lax, which limits when your browser sends it along with requests started from other sites.

The site sets or renews it:

• when you open an address without a language, for example https://firstmove.energy: the site redirects you to the English or German version, choosing your saved language if there is one, otherwise the language your browser asks for (its Accept-Language header), otherwise English;
• when you switch the language with the language switch.

This means the cookie can be set on your first visit, before you choose a language yourself. Each time it is set, its lifetime of one year starts again. It lets the site open in your language when you come back.

Your browser sends the cookie with its requests to firstmove.energy, as it does with every cookie. We use it for nothing else.

4Legal basis

Storing information on your device, or reading information already stored there, needs no consent when it is strictly necessary to provide a service you have expressly requested (§ 25(2) no. 2 TDDDG, which implements Art. 5(3) of the ePrivacy Directive 2002/58/EC).

Every entry in the table meets this test. Each one shows the site in your language, remembers a setting, keeps and syncs the projects you work on, or keeps the AI assistant you set up working. None serves any other purpose.

To the extent these entries contain personal data, for example details you enter in a project, the legal basis is Art. 6(1)(b) GDPR (providing the service under our Terms of Use) and Art. 6(1)(f) GDPR (our legitimate interest in an app that works reliably and remembers your settings). The Privacy Policy explains how First Move handles personal data.

5No tracking

First Move contains no analytics, no advertising, no tracking pixels and no social media widgets.

It loads no scripts, fonts, maps or embedded content from third parties. Our fonts are served from our own site.

We do not use any of the entries to identify you, build a profile or follow you across websites.

The site sends the header Referrer-Policy: no-referrer, so your browser does not tell other sites which page of First Move you came from. Its Content Security Policy limits the app's connections to its own origin and, on dashboard pages, to the two AI providers of the assistant.

E-mails are a separate matter: the e-mails we send contain minimal tracking by our e-mail provider, described under E-mail tracking.

6Third parties

First Move sets no third-party cookies and gives no third party access to the storage listed here.

Our hosting provider, Vercel Inc., delivers the pages and processes ordinary request data to do so. The Privacy Policy describes what it processes and why.

Links to other websites, such as GitHub in the footer, take you to services with their own cookie and privacy policies. Those apply once you follow the link.

When the optional AI features are available and you set them up, your browser sends the requests you trigger directly to the AI provider you chose, and that provider's terms and policies apply. The entries the assistant keeps in your browser, such as your encrypted API key, are listed in the table. See AI transparency.

7Delete or block

All of this sits in your browser, so you control it there.

• Delete everything: in your browser's settings, delete the cookies and site data for firstmove.energy. Many browsers call this ‘Clear site data’; where to find it depends on your browser.
• Delete single entries: the developer tools of most browsers list a site's cookies, localStorage, sessionStorage and IndexedDB and let you remove individual entries.
• Session entry: first-move:active-project disappears by itself when you close the tab.

Deleting site data deletes every project stored in this browser. We cannot recover it, because we never have it. Export each project you want to keep as a .firstmove.json file first; you can import it again later.

To block cookies, use your browser's cookie settings for firstmove.energy. First Move still works without the cookie, but it forgets your language choice: an address without a language then opens in your browser's language, or in English.

Some browsers block all site storage, not only cookies, when you block cookies for a site, and private windows can limit storage too. First Move then cannot keep projects reliably in this browser and shows a warning. Export your work before you close the page.

8The cookie notice

First Move shows a short cookie notice until you dismiss it. It is there to inform you, not to collect consent: everything listed here is strictly necessary, so there is no optional cookie to accept or reject.

When you dismiss the notice, the app stores first-move:notice-ack in localStorage so the notice does not appear again. If you clear site data, or your browser blocks storage, the notice appears again on your next visit.

9Changes to this policy

We update this policy when First Move starts using a new cookie or storage entry, stops using one, or uses one for a different purpose. The date and version of this policy show when it last changed.

If a future entry needed your consent, we would ask for it before setting that entry.

10Contact

First Move is operated by Kiarash N.A.. Questions about cookies and browser storage go to human@mail.firstmove.energy. A person reads this mailbox.

Please send privacy and legal requests only to that address. Our second address, agent@mail.firstmove.energy, is answered by an AI system.

Your rights under the GDPR are set out in the Privacy Policy, and the provider of First Move is named in the Imprint.