Privacy & cookies
Cookies we set
We only use cookies required to keep the site working - none of them track you across other sites, and none are used for advertising.
| Cookie | Purpose | Expires |
|---|---|---|
| next-auth.session-token | Keeps you signed in | 30 days |
| next-auth.csrf-token | Protects sign-in forms from cross-site request forgery | Session |
| next-auth.callback-url | Remembers where to send you back after signing in | Session |
All three are strictly necessary for authentication - under GDPR/ePrivacy that category doesn't require consent, only disclosure. We'll add a consent banner here if that ever changes (e.g. if we add analytics).
What we store
If you sign up, we store your email, name, and (for email/password accounts) a hashed password. Signing in with Google or GitHub shares only your name and email with us, never your password.