Cookie Policy

Last updated: 30 June 2026

We try to keep cookies to the absolute minimum. This policy explains what we use and why.

Strictly necessary

These are set by default and cannot be switched off — the service will not work without them.

• dw_session — keeps you logged in. HttpOnly, Secure, SameSite=Lax. Expires after 30 days of inactivity.
• dw_csrf — prevents cross-site request forgery. Session-only.

Analytics (optional, with consent)

Disabled by default. If you consent via the banner, we set:

• _plausible_* — privacy-respecting analytics. No personal data, no cross-site tracking. Hosted in the EU.

What we do NOT use

• No Google Analytics, Facebook Pixel, TikTok, LinkedIn Insight, or any ad-tech tracker.
• No third-party marketing cookies.
• No cross-site fingerprinting.

Managing cookies

You can clear or block cookies in your browser settings. Disabling strictly-necessary cookies will prevent you from logging in.

Changes

If we add any new cookie we will update this page and re-prompt for consent where required.