Cookie Policy

Last updated: 2026.

What cookies we use

• session — your login session. HttpOnly, Secure, SameSite=Lax, 30 days.
• logged_in — a simple flag so the site can render the right header without hitting the server first. 30 days.
• csrf_token — protects forms against cross-site request forgery. 30 days.

What we do not use

We do not use advertising, tracking or analytics cookies. We do not embed third-party scripts other than the Cloudflare Turnstile widget.

Managing cookies

You can clear cookies from your browser settings. Clearing session logs you out. You cannot turn off essential cookies and still use the site.