Cookie Policy
Last updated
1. Our approach
We set nothing beyond what is strictly necessary until you tell us we can. Refusing is one click, exactly like accepting, and refusing costs you no functionality other than the analytics we would have collected.
Your choice is stored for 180 days, after which we ask again rather than assume it still holds.
2. Strictly necessary cookies
These make the site work — signing you in and protecting the session. They do not require consent under Article 5(3) of the ePrivacy Directive, and you cannot turn them off while using the service.
| Name | Purpose | Duration |
|---|---|---|
| access_token | Keeps you signed in. HTTP-only, so page scripts cannot read it. | Session / short-lived |
| refresh_token | Renews your session without making you log in again. | Up to 30 days |
| csrf_token | Protects against cross-site request forgery on state-changing requests. | Session |
| cs_consent | Remembers the cookie choice you made on this page. | 180 days |
| NEXT_LOCALE | Remembers your language so pages load in it. | 1 year |
3. Analytics cookies — consent required
Set only if you accept them. They tell us which pages and features are used so we can decide what to build and what to fix. They are never used for advertising, never shared with ad networks and never sold.
| Name | Purpose | Duration |
|---|---|---|
| ph_* / _ph_* | Distinguishes one visitor from another and groups their page views into a session, so we can count usage without identifying you by name. | Up to 12 months |
We configure our analytics to mask IP addresses and we do not enable session recording or heatmaps.
4. Third parties
Stripe
When you open the checkout, Stripe sets its own cookies to detect fraud and to make payment work. These are necessary to complete a payment you have asked to make. See Stripe’s privacy policy.
Error monitoring
Sentry records diagnostics when something breaks. It does not use cookies to track you across sites; it attaches a random identifier to an error report so we can tell two reports apart.
5. Changing your mind
You can change or withdraw your consent at any time. When you withdraw analytics consent we delete the analytics cookies already set.
You can also block or delete cookies in your browser settings, though blocking the strictly necessary ones will stop you from signing in.