Cookie Notice

What cookies we use

A cookie is a small file the site asks your browser to keep. We use a handful, and each one exists because a function of the site needs it: signing in, staying signed in, remembering the language you chose, and remembering that the research-use notice was already acknowledged.

We do not use cookies for advertising, audience measurement, or following visitors across other sites, and we do not load third-party scripts that would set their own.

The cookies this site sets

This is the whole list. If it changes, this notice changes with it.

Over HTTPS some of these names carry a browser-imposed prefix such as __Secure- or __Host-. That is the same cookie under a stricter browser rule, not an additional one.

• Sign-in session (authjs.session-token) — created when you sign in and is what keeps you signed in from page to page. It is removed when you sign out.
• Sign-in security (authjs.csrf-token) — lets us confirm that a sign-in request came from our own form and not from another site.
• Return path (authjs.callback-url) — remembers the page you were on so that signing in does not send you back to the start.
• Research-use notice (ruo_attestation) — stores the version label of the research-use wording that was acknowledged, so the notice is not shown again until that wording changes. It holds that label and nothing else, and it lasts a year.
• Language (NEXT_LOCALE) — remembers the language you selected so the site does not revert to English on your next visit.
• Cookie choice (ruo_consent) — remembers whether you accepted or rejected non-essential cookies, so you are not asked again. It holds that one word and nothing else, and it lasts a year. Clearing it brings the notice back.
• Referral link (referral_code) — when you arrive through someone's referral link, we keep the code for ten minutes so it can be attached to a sign-up completed in that window. It is signed so it cannot be altered, and it is deleted as soon as the sign-up page reads it.

What we do not do

There are no advertising, analytics, or social-network cookies on this site, and no third party sets a cookie through it. We do not build profiles of visitors and we do not sell or share browsing data.

If we ever add something that measures how the site is used, this notice is updated before that code ships, and it will name what the thing is and who operates it.

Turning them off

Your browser can block or delete cookies, and every browser offers this in its settings.

The cookies listed above are the ones the site needs in order to work. Blocking them means a sign-in cannot be kept, a language choice is forgotten, and the research-use notice reappears on every page.

Where the rest of the detail is

What we collect through your account and your orders, why we collect it, and how long we keep it are set out in the Privacy Policy.