// LEGAL · 05
Cookie Policy
Describes the cookies and browser storage this site actually sets.
1
The short version
We set no advertising cookies, no tracking pixels and no third-party marketing cookies. Everything listed below is either required to keep you signed in and to let you through a QR code’s access gate, or is a single browser-storage key that remembers you dismissed a notice.
Because none of it is used for advertising or cross-site tracking, there is nothing here that requires your consent before it is set. If that ever changes, the new category will be listed here and gated behind an explicit opt-in first.
2
What we set
| Name | Purpose | Duration | Category |
|---|---|---|---|
| sid | Signed-in session. An opaque random id that lets the server resolve who you are; it carries no personal data itself. httpOnly, Secure, SameSite=Lax. | Until sign-out or expiry | Strictly necessary |
| gp | Gate pass. Records that you passed a QR code's PIN, OTP or magic-link check, so you are not asked again on every view of the same code. httpOnly, Secure, SameSite=Lax. | 1 hour | Strictly necessary |
| analytics-notice-dismissed | Browser localStorage, not a cookie. Remembers that you closed the privacy notice so it is not shown on every page. | Until you clear site data | Functional |
3
Analytics
Where analytics is enabled on a deployment, it is cookieless: no identifier is stored in your browser and no profile is built across sites. The notice you may have seen is informational for that reason, not a consent gate.
4
Controlling cookies
You can clear or block cookies in your browser settings. Blocking the two strictly necessary cookies above will sign you out and stop gated QR codes from opening, because they are the mechanism by which the server knows a gate was passed.
5
Related documents
See the Privacy Policy for what personal data we process and why, and Contact to reach us about anything on this page.