Last updated 1 September 2026. Short, because we use almost none.
| Cookie | Purpose | Duration | Type |
|---|---|---|---|
| PHPSESSID | Keeps you signed in and protects forms against cross-site request forgery | Session | Strictly necessary |
That is the entire list. It contains a random identifier and nothing about you.
This is why you are not being shown a consent banner. Strictly necessary cookies do not require consent under the ePrivacy Directive or GDPR, and we do not set anything else.
When you go through checkout, Stripe sets its own cookies on its own domain for fraud prevention. That is governed by Stripe's cookie policy, not ours. We do not embed Stripe on other pages, so this only happens if you actually start a payment.
You can block or delete cookies in your browser settings. If you block the session cookie you will not be able to sign in, because there will be no way to remember that you did. The marketing pages work fine without it.
The console stores nothing in local storage or IndexedDB. Everything it displays comes from the server on each request.
If we ever add a cookie beyond the one above, we will update this page and, where the law requires it, ask for your consent first.