Cookies and local storage
Updated 9 September 2026
This is a short document because there is little to tell: there are no advertising or analytics cookies on the site. Everything listed below is needed to make signing in work and to remember your language.
What we do not have
- Google Analytics, or any other traffic counter.
- Advertising pixels and retargeting networks.
- Third-party scripts loaded from someone else's domain that could follow you across other sites.
That is why we show no cookie consent banner: consent is required for analytics and advertising cookies, and we have none.
The cookies we set
- authjs.session-token — the session itself after you sign in. It lasts seven days and is renewed while you are active. Without it you would be signed out on every page you open.
- authjs.csrf-token — protects the sign-in form against a forged request from another site.
- authjs.callback-url — the internal return address used during sign-in.
- i18next — the interface language you chose, so the same version opens next time.
Over a secure connection the first three cookies carry the __Secure- prefix.
What we keep in the browser besides cookies
Your browser's local storage holds device-id — a random identifier created at first sign-in. It lets the service tell your devices apart and end a session on a particular one.
It is not linked to any advertising profile and is sent nowhere except our own service.
How to opt out
Cookies and local storage are cleared through your browser. Be aware that clearing them signs you out and resets the interface language.
These cookies cannot be refused while continuing to use an account — signing in does not work without them.