Cookie Policy
Last updated: August 22, 2026 — What's changed: Added the optional "remember this device" cookie, set only if you check that box at login (previously this page said only one cookie existed, which is now out of date).
The real, complete list — not boilerplate. This site was audited directly (code inspection plus live request headers) to produce this page, not written from assumptions.
The short version
This site sets one strictly necessary cookie when you log in, and one additional, entirely optional cookie only if you check "remember this device" at login — nothing else. No tracking, analytics, or advertising cookies exist on this site, full stop.
The cookie: session
Set only when you log in to the operator/admin dashboard or the customer portal — nothing is set just from browsing the public pages of this site.
| Purpose | Keeps you logged in between page loads |
| Type | Strictly necessary — the dashboard/portal cannot function without it |
| Duration | Persistent — up to 24 hours, sliding: refreshed on each request while you're active and expiring 24 hours after your last one (not deleted when you close your browser, despite the name "session") |
| Contents | Just your username, cryptographically signed so it can't be forged or tampered with |
| Security flags | HttpOnly (invisible to page scripts), Secure (only ever sent over HTTPS), SameSite=Lax |
In plain terms: this cookie exists purely so the site can tell "you logged in" from "you didn't," across the requests your browser makes while you use the dashboard/portal. It doesn't track what you do elsewhere on the internet, doesn't identify you to any third party, and doesn't exist at all unless you actually log in.
The cookie: remember_device (optional)
Set only if you tick "remember this device" on the login page — never set otherwise, and never required to log in. Its only purpose is to skip the two-factor authentication prompt on a device you've explicitly told this site to trust.
| Purpose | Lets a trusted device skip re-entering a 2FA code on a future login |
| Type | Optional — only set if you check the box; login and 2FA work fully without it |
| Duration | Up to 30 days from when it's issued, then it must be re-established |
| Contents | An opaque, server-verified credential — not your password, not your 2FA secret |
| Security flags | HttpOnly, Secure, SameSite=Strict, and scoped only to the login page path — never sent with any other request this browser makes to this site |
You can stop this device from being remembered at any time by revoking it from Session/Device management once logged in, or simply by not checking the box on future logins.
No tracking, analytics, or advertising cookies
This site does not use Google Analytics, Meta Pixel, or any other analytics/advertising service — none are integrated, so none set cookies. There is nothing here to "accept" or "reject" beyond the one necessary cookie above, which is why this site doesn't show a fake multi-option cookie banner — that would imply a choice that doesn't actually exist.
Third-party resources (not cookies)
This site loads fonts from two external providers: Fontshare
(api.fontshare.com / cdn.fontshare.com),
used for the site's primary typeface, and Google Fonts
(fonts.googleapis.com / fonts.gstatic.com),
used for monospace/technical text. These are static font/CSS file
requests, not scripts, and don't set cookies for this kind of
request. Listed here for completeness, not because it adds a
cookie to the list above.