Last updated 28 October 2026
Cookie notice
Good news: there's no cookie banner because there's nothing to accept. We only use cookies that are strictly necessary to log you in and keep you safe.
Cookies we set
| Name | Purpose | Duration |
|---|---|---|
authjs.session-token (or __Secure- prefixed) | Keeps you logged in to the app | 14 days |
authjs.csrf-token | Protects login forms against cross-site request forgery | Session |
authjs.callback-url | Returns you to the right page after login | Session |
These are strictly necessary under Art. 5(3) of the ePrivacy Directive and national implementations, so no consent is required. They are only set when you log in or sign up.
What we don't use
- No advertising or tracking cookies.
- No third-party embeds, social pixels or Google services.
- If website analytics are enabled, we use Plausible (an Estonian company, data in Germany), which is cookieless and does not collect personal data.
Questions? See our privacy policy.