Cookies

A small piece of text a site asks your browser to keep and send back on your next visit. Some last for the session and go when the browser closes; some carry a date and stay until it passes. Similar storage — local storage, a token the plugin keeps — does the same job by another route, and this page covers it the same way.

Your session. When you sign in, our sign-in provider, Supabase, sets a cookie pair that says who you are on each request, so the account area can show you your account and not someone else's. It is set by signing in, refreshed while you use the site, and cleared when you sign out. Unrefreshed, it expires on its own.

Your preferences. In the account area, a cookie called sidebar_state remembers whether you collapsed the sidebar. Your answer to the cookie banner is kept in local storage as heisy:consent, so it is not asked again. None of these leave your browser.

These are necessary: they do what you asked for, and set nothing about you anywhere else. No advertising cookie, no cookie from a social network, and no cookie that follows you to another site.

If you accept analytics, Google Analytics is loaded and sets two cookies: _ga and _ga_3H4ZMV8JGE. They tell us which pages of this site are read and where visitors came from, counted across visits, and each lives up to two years. Google processes this for us under its data processing terms.

They are set only after you say yes. Until then, and if you say no, Google Analytics is not loaded at all. It runs on the public pages only, not inside your account.

Paying takes you to a page Stripe hosts, and managing your billing takes you to another. On those pages Stripe sets its own cookies, for fraud prevention and to keep the checkout working, under Stripe's cookie policy. They are set on Stripe's domain, not ours, and we cannot read them.

The law asks for consent before a cookie that is not necessary for the service you asked for, and analytics is the only one here. So the first time you visit, a banner asks — with "Reject all" as easy to press as "Accept all" — and nothing optional is set until you answer.

You can change your mind at any time with Cookie settings at the foot of every page. Withdraw consent and Google Analytics stops at once and its cookies are deleted.

Your browser can show, block or delete any cookie: the setting is under Privacy in Chrome, Firefox, Safari and Edge alike. Block the session cookie and you cannot stay signed in, which is the one thing it does. Signing out clears it without touching anything else.

The date at the top is when this last changed. A new cookie is listed here before it is set.