Cookie Policy
Last updated: 17 September 2026
This system sets only strictly-necessary cookies — keeping you logged in and the login flow working. There are no analytics, advertising or marketing cookies on this deployment, so there's nothing optional to consent to.
Cookies we set
| Cookie | Purpose | Duration |
|---|---|---|
access_token |
Keeps you signed in to your account. Set only after you log in; httpOnly, so page scripts can't read it. | Matches your session length (currently 30 minutes) |
session |
Signed session cookie used by the login flow (e.g. carrying you through two-factor authentication). | Browser session |