Cookies

1. The short version

This site sets only the cookies it needs to work. We load no advertising trackers, no analytics scripts, and no third-party pixels — so there is nothing to opt out of today beyond the essentials, which cannot be switched off because sign-in and security depend on them.

The banner still asks, because the moment that changes you should be the one who decides. Anything we add later sits behind the choice you make there, and nothing optional runs until you say yes.

2. What we set today

• Session cookie: keeps you signed in as you move between pages. Expires when your session ends.
• CSRF token: proves a form submission came from you and not another site. Session length.
• Appearance: remembers light or dark mode. One year.
• Cookie choice (otd_consent): remembers the decision you made in the banner, so we stop asking. One year.
• Visitor reference (otd_visitor): ties that decision to a record of when it was made. One year.

All of these are first-party: they are set by this site and readable only by this site.

3. The categories in the banner

• Essential. The five above. Always on, because the site cannot function without them.
• Analytics. Which pages get used and where people get stuck, so we can fix the confusing parts. None in use today.
• Marketing. Measuring which adverts brought someone here. None in use today.

Analytics and marketing are off unless you turn them on. We do not treat carrying on browsing, scrolling, or closing the banner as agreement.

4. Changing your mind

Use the Cookies link in the footer of our public pages. Withdrawing is the same single click as granting, and takes effect immediately. Clearing your browser cookies also clears your choice, and we will ask again next time.

5. Global Privacy Control

Some browsers and extensions send a Global Privacy Control signal on your behalf, which is a standing instruction not to sell or share your personal information. California, Colorado and Connecticut all require that signal to be honoured as a real opt-out request rather than treated as a suggestion.

We honour it. If your browser sends it, analytics and marketing stay off, we record that refusal so it is on the file, and we do not interrupt you with the banner to ask a question you have already answered. You can still turn something on deliberately from the Cookies link in the footer, and if you do, that later choice is the one we follow.

6. Where this fits

Cookies are only part of the picture. What we collect, why we hold it, how long we keep it, and how to get a copy or ask us to erase it are all in our Privacy Policy.