Cookie Policy

Last updated: 2026-05-30

What cookies are

Small text files stored by your browser. By default we only set strictly necessary cookies. Analytics and profiling cookies require your explicit consent.

Cookies we use

Necessary (always active)

`authjs.session-token` — session authentication (30 days)
`NEXT_LOCALE` — language preference (1 year)
`__Secure-authjs.callback-url` — post-login redirect (session)
`__Host-authjs.csrf-token` — CSRF protection (session)

Functional (opt-in via banner)

`cookie-consent` — your banner choice (6 months)
`watchlist-tour-done` — tutorial seen (1 year)

Analytics (opt-in via banner)

If accepted: Cloudflare Web Analytics (cookieless, privacy-friendly). No Google Analytics, no Facebook Pixel, no ad cookies.

Managing cookies

Via the consent banner on first visit (reopen it from the "Manage cookies" footer link).
Via your browser settings.

Third-party cookies

Only if you sign in via Google: Google sets its own cookies on its domain.

Changes

Published here with an updated date.