Cookie Policy

Cookies are small text files that websites place on your device. We use two kinds: cookies that are strictly necessary for the service to function, which are always on, and analytics cookies, which are set only after you accept them. We do not use any advertising or cross-site tracking cookies.

accessToken (httpOnly, secure, SameSite=Lax) — short-lived JWT that keeps you signed in. Required for the app to function.

refreshToken (httpOnly, secure, SameSite=Lax) — long-lived refresh token, used to renew your session without re-logging in.

lang (no httpOnly, SameSite=Lax) — your chosen interface language. Not sensitive.

aboutspace:consent (browser local storage, not a cookie) — records whether you accepted or declined analytics. Stored so we do not ask again on every visit.

_ga and _ga_* (analytics, up to 2 years) — set by Google Analytics to distinguish one visitor from another. Set only after you accept analytics cookies, and removed when you withdraw that consent.

Stripe Checkout and the Stripe Customer Portal set their own cookies on stripe.com when you are paying or managing billing. These are governed by Stripe's cookie policy.

If you accept analytics cookies, Google Analytics 4 (Google Ireland Ltd.) loads and sets the _ga cookies described above. It tells us which pages are used and how people move through the site; when you are signed in we pass a pseudonymous account identifier, never your name or email address. If you decline, the Google script is never loaded and no request is made to Google.

We do not use Google Tag Manager, the Facebook Pixel, advertising tags, or similar cross-site tracking pixels.

On your first visit we ask whether you accept analytics cookies. Nothing is loaded until you answer, and declining costs you no functionality. You can change your answer at any time using the button at the bottom of this page — withdrawing consent stops further collection and clears the analytics cookies already on your device.

The cookies needed to run the service cannot be switched off. You can clear or block cookies in your browser settings, but doing so will sign you out.

If we add a cookie that requires consent, we will update this policy and ask you again rather than relying on an answer you gave about a different cookie.