Cookie Policy

Strictly necessary only: a session cookie for signed-in members and a separate session cookie for CMS administrators. Both are HTTP-only, are used solely to keep you logged in, and are removed when they expire or you sign out. Because they are essential to a service you asked for, they do not require consent.

We use your browser's local storage — not cookies — to remember your light or dark theme, your chosen language, whether you dismissed the newsletter prompt, and a small marker that stops the same post being counted twice in one session.

Our analytics are first-party and cookieless. We record aggregate page views, the page path, the referring domain and a visitor hash that is salted with a server secret plus the date, then discarded — so the same browser produces a different value each day and cannot be followed. No IP address or user agent is stored.

If we ever enable a third-party analytics provider it will be listed here, and a consent banner will appear before it loads.

Embedded YouTube videos, Giscus comments and PayPal's checkout may set their own cookies once you interact with them; those are governed by the respective provider's policies.

You can block or delete cookies in your browser settings. Blocking the session cookie will prevent you from signing in, but the rest of the site will continue to work.