Cookies

This site uses a small number of first-party cookies. None of them track you, build a profile, or reach an advertiser. There are no third-party analytics or advertising cookies at all.

What is set, and why

• uncode_user — set when you sign in, so the site knows the account is yours on the next request. It holds a random session token, nothing about you. HttpOnly, Secure, SameSite=Lax, expires after 30 days. Without it you cannot stay signed in.
• uncode_admin — the same idea for the owner's admin panel, and only ever set for the owner. HttpOnly, Secure, 12 hours.
• a short-lived login cookie — during a Google or GitHub sign-in, a temporary cookie carries the return address and a one-time state value. It lasts a few minutes and is then gone.

Not cookies, but worth naming

Your language choice and a couple of interface preferences are kept in your browser's own local storage, not sent to any server. A random visitor id is stored the same way, so two visits can be told from two people, and it is not your network address.

Controlling them

Your browser can block or clear cookies for this site at any time. The only cost is that you will be signed out and have to sign in again, since staying signed in is the one thing the session cookie does.