Cookie Policy

1. The one cookie we set

A single session cookie keeps you signed in. It is HttpOnly, so page scripts cannot read it, and it exists only to hold your sign-in session and protect it against cross-site request forgery. The service cannot function without it, so it is strictly necessary and does not require consent.

2. What we do not use

We do not use analytics cookies, advertising cookies, cross-site tracking, fingerprinting, or third-party scripts of any kind.

The host logos in our provider lists come from third-party icon services, but your browser never talks to them: our own server fetches each logo, caches it, and serves it from our domain. So no third party sees your IP address or which page you are on. This used to work the other way round — your browser fetched the logos directly — and this paragraph still described that older behaviour until we corrected it. Our fonts have always been served from our own domain.

Because we set no non-essential cookies, there is nothing to consent to — which is why you will not see a cookie banner here. If that ever changes, we will ask before setting anything.

3. Similar technologies

Your access token is held in memory for the duration of the page, not in local storage — closing the tab discards it. We do not use local storage or session storage to profile you.

4. Managing cookies

You can clear or block cookies in your browser settings. Blocking the session cookie will sign you out and break sign-in; nothing else on the site depends on cookies.