Cookie policy

Last reviewed 14 September 2026

One cookie

Signing in sets two cookies, ws-access-token and ws-refresh-token. They hold the tokens our identity provider issued to identify your account and nothing else — no profile, no tracking identifier. They are HttpOnly, so page scripts cannot read them, and they are sent only to this site. A browser that still carries the older ws_session cookie has it deleted on its next visit.

Why there is no banner

A consent banner exists to ask about cookies you can refuse. This one is strictly necessary to keep you signed in: refuse it and there is no signed-in session to have. Nothing here is set for analytics, advertising or profiling, so there is nothing to ask about.

Turning it off

Sign out and it is cleared. Block cookies for this site in your browser and the public directory, tools and storage pages all keep working — only signing in stops.

If analytics are added

Should the site operator enable an analytics provider, this page and a consent prompt come first. It has not been done, and this page is the record of that.