The only cookie
Name: stb. Purpose: to keep you signed in. It contains a signed token identifying your session and nothing else — no name, no tracking identifier, no record of what you looked at.
- HttpOnly, so scripts on the page cannot read it.
- SameSite=Lax, so it is not sent from other sites.
- Secure in production, so it travels only over HTTPS.
- Time-limited, and cleared the moment you sign out.
What we do not use
- No analytics of any kind — no Google Analytics, no alternatives.
- No advertising or retargeting pixels.
- No session recording or heatmaps.
- No third-party embeds. Typefaces are served from this origin rather than a font CDN, so no outside company sees your IP address when you load a page.
Why there is no banner
Consent banners exist because sites place cookies people did not ask for. A cookie strictly necessary to deliver a service you requested does not require consent under the ePrivacy Directive, and there is nothing else here to consent to.
If we ever add anything that does require a choice, you will be asked before it loads, not after.
Turning it off
You can block or delete the cookie in your browser. Doing so will sign you out and prevent you signing back in, because it is the mechanism by which signing in works.