Cookie Policy
Effective 2026-04-18
We use a small number of cookies to operate the Site. We do not use third-party advertising cookies or cross-site tracking pixels.
Categories
1. Strictly necessary (always on)
Required to provide core functionality (login, security). You cannot opt out of these without breaking the Site.
| Cookie | Purpose | Lifetime |
|---|---|---|
| cbs_session | Authentication session (HTTP-only, SameSite=Strict). | Session |
| cbs_csrf | Double-submit CSRF token paired with cbs_session. | Session |
2. Analytics (first-party, opt-out)
We run our own first-party analytics — no third-party script, no advertising network. Unless you turn Analytics off in the cookie preferences, your browser keeps a random visitor identifier (cbs:vid, localStorage, no expiry) and a 30-minute session identifier (cbs:sid) so we can count returning visits and see which source (search engine, AI assistant, shared link) first brought you here. The identifier is random: it never contains your name, email or IP address. If you turn Analytics off, the identifier is deleted and we only count page views with a salted hash that rotates daily and cannot be tied back to you. If your browser sends Do Not Track, we collect nothing at all.
3. Marketing
We currently use no marketing cookies. If we add a retargeting pixel in the future, it will be opt-in via a consent banner and listed here.
How to control cookies
- Most browsers allow you to block or delete cookies in their settings. Blocking strictly necessary cookies will log you out and break checkout flows.
- You can clear our cookies for this domain at any time via your browser's "Site settings" or DevTools > Application > Cookies.
Do Not Track
We honor the DNT signal: when it is set, our own analytics collects nothing and no third-party tracker is loaded.
Changes
Material changes will be posted on this page. The current cookie inventory is auditable in your browser DevTools.