Site information

Cookie policy

No advertising cookies. No analytics cookies. No optional tracking.

What the site sets

The public project and policy pages do not start an application session. Opening the contact or owner sign-in pages creates __Host-eject_session, a first-party session cookie used to secure forms, remember access to a private request, or keep the owner signed in. It contains an opaque random identifier, not the message itself. It uses Secure, HttpOnly and SameSite=Lax protections in production.

How long it lasts

The cookie is a browser-session cookie. The application expires its session after 30 minutes of inactivity or eight hours in total. Some browsers restore session cookies when reopened; the application time limits still apply. Owner sign-out clears the cookie.

Consent and controls

These cookies are used only for requested functions and their security. No optional cookie categories are enabled, so this version does not display an accept/reject tracking banner. You can block or delete cookies in your browser and still read project pages, but private forms and owner sign-in need the security session to work.

Other storage and services

The site does not use persistent local storage, advertising pixels, third-party fonts, embedded media or Stripe scripts. The Theme menu can optionally save only a colour name in tab-scoped session storage after you check “Remember in this tab”. Unchecking it clears that value. This preference is not a cookie and is not sent to the server. Tab/session restoration may retain it. No preference is saved by default. The hosting provider may apply infrastructure security measures, which are described in the privacy policy where relevant. If optional tracking or embeds are introduced later, the policy and any required prior-consent controls must be updated before activation.

Last updated: 2026-09-20