Cookie Notice

Versioncookies-v0.2No effective date

What cookies we use

A cookie is a small file the site asks your browser to keep. We use a handful, and each one exists because a function of the site needs it: signing in, staying signed in, remembering the language you chose, and remembering that the research-use notice was already acknowledged.

We do not use cookies for advertising, audience measurement, or following visitors across other sites, and we do not load third-party scripts that would set their own.

The cookies this site sets

This is the whole list. If it changes, this notice changes with it.

Over HTTPS some of these names carry a browser-imposed prefix such as __Secure- or __Host-. That is the same cookie under a stricter browser rule, not an additional one.

Sign-in session (authjs.session-token) — created when you sign in and is what keeps you signed in from page to page. It is removed when you sign out.
Sign-in security (authjs.csrf-token) — lets us confirm that a sign-in request came from our own form and not from another site.
Return path (authjs.callback-url) — remembers the page you were on so that signing in does not send you back to the start.
Research-use notice (ruo_attestation) — stores the version label of the research-use wording that was acknowledged, so the notice is not shown again until that wording changes. It holds that label and nothing else, and it lasts a year.
Language (NEXT_LOCALE) — remembers the language you selected so the site does not revert to English on your next visit.
Cookie choice (ruo_consent) — remembers whether you accepted or rejected non-essential cookies, so you are not asked again. It holds that one word and nothing else, and it lasts a year. Clearing it brings the notice back.
Admin sidebar (admin_nav_collapsed) — only ever set for signed-in administrators, and only when one collapses or expands the admin side rail. It holds that single preference so the panel is delivered at the chosen width instead of jumping after load, and it lasts a year. It is never set for buyers.
Referral link (referral_code) — when you arrive through someone's referral link, we keep the code for ten minutes so it can be attached to a sign-up completed in that window. It is signed so it cannot be altered. The sign-up page reads it and hands the code to the sign-up form as a snapshot fixed at page load; the cookie itself is not deleted when the page reads it. It runs out its ten minutes at most, and any new visit through a referral link overwrites it with the newer code.

What we do not do

There are no advertising, analytics, or social-network cookies on this site, and no third party sets a cookie through it. We do not build profiles of visitors and we do not sell or share browsing data.

If we ever add something that measures how the site is used, this notice is updated before that code ships, and it will name what the thing is and who operates it.

Turning them off

Your browser can block or delete cookies, and every browser offers this in its settings.

The cookies listed above are the ones the site needs in order to work. Blocking them means a sign-in cannot be kept, a language choice is forgotten, and the research-use notice reappears on every page.

Where the rest of the detail is

What we collect through your account and your orders, why we collect it, and how long we keep it are set out in the Privacy Policy.