Legal · Transparency

Cookie policy

The short list of cookies this site sets, what each one is for, and how long it stays.

Last updated · September 26, 2026

01What cookies are

A cookie is a small text file a site stores in your browser. The site can read it back on a later request, which is how a login survives a page reload and how a preference like a theme choice sticks.

Cookies are not programs and cannot read anything else on your device. Each one belongs to the domain that set it.

02Cookies this site sets

This site sets a deliberately small set of first-party cookies, and all of them are necessary ones.

Sign-in session

  • next-auth.session-token — proves you are signed in. HTTP-only, so scripts cannot read it. Removed when you sign out.
  • next-auth.csrf-token — protects the sign-in form against cross-site request forgery. Session length.
  • next-auth.callback-url — remembers where to send you after signing in. Session length.

Other first-party storage

  • flash.theme — the theme you picked (Light, Navy, Cosmic, Steel, Crimson or Copper), kept in localStorage rather than in a cookie.
  • cookieConsent — the choice you made in the consent banner, also kept in localStorage.

03Third-party cookies

Two Google services can set their own cookies while you are on this site. Both are on the sign-in and register pages, not on the store, the market or the blog.

Where they come from

  • _GRECAPTCHA — set by Google reCAPTCHA to tell a person from a bot when you sign in or register. Necessary for those forms to work.
  • Google OAuth cookies — only if you choose Continue with Google. They are set by accounts.google.com, and Google's own policy covers them.

04Managing them

You are in control. The consent banner lets you accept everything or keep only what the site needs; because this site sets no analytics or advertising cookies, that choice does not change what loads — it records your preference.

Every browser also lets you view, block and delete cookies for a specific site. Blocking the session cookie will sign you out and stop you from staying signed in; blocking the reCAPTCHA cookie will stop the sign-in and register forms from submitting.

05Changes to this policy

If the cookies this site sets ever change, this page changes with them, and the date at the top of the page is updated.

See our privacy policy for everything else about how your data is handled.