Home / Cookie Policy
Cookie Policy
Last updated: 3 November 2026
We only set cookies needed to run and secure the service. Optional analytics run only if you allow them. Change your choice any time: .
| Name | Type | Purpose | Lifetime |
|---|---|---|---|
access_token | Strictly necessary | Keeps you signed in (HttpOnly) | 5 minutes |
refresh_token | Strictly necessary | Renews your session securely (HttpOnly) | 14 days |
rs_signed_in | Strictly necessary | Tells our pages you are signed in so the menu shows your account (contains no identifier) | 14 days |
csrf_token | Strictly necessary | Protects forms against cross-site request forgery | 30 days |
mfa_pending | Strictly necessary | Holds the second sign-in step for two-factor | 5 minutes |
oauth_state | Strictly necessary | Protects Google sign-in against forgery | 10 minutes |
rs_consent_v1 (local storage) | Strictly necessary | Remembers your cookie choice | Until cleared |
We don't use analytics, advertising or cross-site tracking cookies. If we add analytics, it will run only after you allow it in Cookie settings and be listed here. Paying opens Stripe's own checkout page, which sets Stripe's cookies under Stripe's cookie policy. Fonts are self-hosted, so loading our pages doesn't contact third parties.
See also: Terms · Privacy · Cookies · Acceptable Use · Subprocessors · Security