Cookies
Two cookies, both necessary for signing in. No analytics, no advertising, no third parties. That is the entire list, which is why there is no consent banner.
Last updated .
What we set
| Cookie | Purpose | Expires |
|---|---|---|
skiplink_session |
Keeps you signed in. Contains a random token and nothing else — no email, no
identifier, no preferences. HttpOnly, so script cannot read it;
Secure, so it never travels over plain HTTP; SameSite=Strict,
so a browser will not attach it to a request from another site. |
30 days, or when you sign out |
skiplink_signed_in |
A flag that says a session exists, so a page can render the right navigation immediately instead of flashing “Sign in” and then correcting itself. Contains no secret and grants no access — deleting it logs you out of nothing. | 30 days |
Why we do not ask for consent
Under the UK Privacy and Electronic Communications Regulations and the EU ePrivacy Directive, consent is required for cookies that are not strictly necessary for a service you have asked for. Both of ours are: one authenticates you, the other stops the page rendering the wrong navigation. There is nothing here to consent to, and a banner asking you to accept cookies we would set anyway would be theatre.
If we ever add anything that is not strictly necessary, you will get a real consent mechanism with a genuine reject option, and this page will say so before it appears.
What we do not set
No analytics cookies of any kind. No advertising or conversion pixels. No session recording. No third-party cookies, because there are no third-party scripts — the site loads one stylesheet and one script, both from our own domain.
That is enforced rather than promised: the site's Content Security Policy blocks every external connection except our own API, so a tracker added by mistake would simply fail to load. You can check it in the response headers.
Refusing them
Your browser can block or delete cookies for this site. Blocking them means you cannot sign in, because there is no other way for us to know a request is yours. Everything that does not require an account — the docs, the reference, the pricing, the free scanner — works with cookies blocked entirely.