Cookie
policy.
Last updated 26 October 2026.
The short version
We use only the cookies needed to sign you in and keep the site secure. We do not use advertising, analytics or tracking cookies, so we do not need to ask for your consent and there is no cookie banner.
Cookies we use
| Name | Purpose | How long |
|---|---|---|
| ays.session_token | Keeps you signed in after you log in on the web | Up to 30 days, or until you sign out |
| ays.dont_remember | Set when you sign in without "remember me" | Until you close the browser |
| ays.two_factor | Links the two steps of a two-step sign-in | A few minutes |
On the live site each name starts with __Secure-, which tells browsers to send it only over encrypted connections. All of them are first-party and not readable by scripts on the page. Browsing the public website without signing in sets none of them.
Our host Cloudflare may set strictly necessary security cookies to protect the site from attacks and bots. Our spam check on forms (Cloudflare Turnstile) runs only on pages with a form.
Controlling cookies
You can block or delete cookies in your browser settings. If you block the cookies above, you will not be able to sign in on the web.
Changes
If we ever want to use a cookie that is not strictly necessary, we will ask for your consent first and update this page.