Cookie policy

01Strictly necessary (only when you sign in)

These keep you signed in and secure the sign-in. They do not need your consent. They are first-party, HttpOnly, SameSite=Lax and, on the live site, Secure.

• Sign-in session: a cookie whose name starts with sb- and ends with -auth-token (it can be split into numbered parts). It lasts up to 30 days, renewed while you keep using the site, and is removed when you sign out.
• Sign-in check: a cookie whose name ends with -code-verifier. It protects the sign-in handshake and is removed when sign-in finishes.

02Preferences (only if you allow it)

If you accept preferences, your light or dark theme choice is remembered in your browser’s local storage under the name theme. It is not a cookie and it never leaves your device. If you reject preferences, the site follows your device’s setting and remembers nothing.

03Your cookie choice

Your choice in the cookie notice is remembered in your browser’s local storage under the name cookie-choice, so that we can respect it. You can change it at any time with the Cookie settings link in the footer.

04What we do not use

• No analytics.
• No advertising cookies.
• No tracking or social-media pixels.

05Other websites

When you choose to sign in with Google, you leave our website. Google sets its own cookies on its own pages, under its own policies.