The only cookie
Name: stb. Purpose: to keep you signed in. It contains a signed token identifying your session and nothing else — no name, no tracking identifier, no record of what you looked at.
- HttpOnly, so scripts on the page cannot read it.
- SameSite=Lax, so it is not sent from other sites.
- Secure in production, so it travels only over HTTPS.
- Time-limited, and cleared the moment you sign out.
What we do not use
- No analytics of any kind — no Google Analytics, no alternatives.
- No advertising or retargeting pixels.
- No session recording or heatmaps.
- No third-party embeds. Typefaces are served from this origin rather than a font CDN, so no outside company sees your IP address when you load a page.
One honest edge case
A link that brought you here — from an advertisement or a page of ours — may carry a label in the address itself, like ?from=ad-name. It is not a cookie and it is stored nowhere on your device: it stays in your address bar, sends nothing anywhere by itself, and identifies the link, not you — everyone who follows the same link carries the same label. The only thing it ever does is ride along if you choose to send the access-request form, so we know which advertisement worked. Delete it from the address bar and it is gone.
Why there is no banner
Consent banners exist because sites place cookies people did not ask for. A cookie strictly necessary to deliver a service you requested does not require consent under the ePrivacy Directive, and there is nothing else here to consent to.
If we ever add anything that does require a choice, you will be asked before it loads, not after.
Turning it off
You can block or delete the cookie in your browser. Doing so will sign you out and prevent you signing back in, because it is the mechanism by which signing in works.