Cookie Policy.
Four things get stored in your browser. Three are strictly necessary; one is analytics, and it does not load unless you allow it.
Consent, not just disclosure
Non-essential tracking is gated behind a choice rather than a notice. On your first visit the site asks once; until you answer, Google Analytics is not loaded at all, and if you decline it never is. This applies everywhere, not only to visitors in the EU or UK.
To change your mind, clear this site's data in your browser and the question is asked again on your next visit.
What each one does
sb-<project>-auth-tokenCookie (first-party)Keeps you signed in. Issued by Supabase Auth after email sign-in; without it the dashboard and AMA replies cannot know who you are.
- Lifetime
- Until you log out, or the session expires.
- Consent
- Strictly necessary — set only once you sign in.
pb-consent-analyticsLocal storageRemembers whether you allowed or declined analytics, so you are not asked on every page.
- Lifetime
- Until you clear site data.
- Consent
- Strictly necessary — it is the record of your choice.
pb session identifierIn-memory / hashedCounts a visit to a billboard once rather than on every scroll. Hashed with a server-side salt; it is not a cross-site identifier and cannot be reversed to a person.
- Lifetime
- The browsing session.
- Consent
- Strictly necessary for the visitor counts the site exists to show.
_ga, _ga_<id>Cookie (Google Analytics)Aggregate page analytics: which pages get read, roughly where readers are. Advertising and personalisation signals are switched off explicitly, and IPs are anonymised.
- Lifetime
- Up to 2 years, set by Google.
- Consent
- Requires consent. Nothing is loaded until you press Allow, and declining leaves nothing behind.
Your rights
Under the GDPR and CCPA you can ask for a copy of what is held about you, have it corrected, or have it deleted. Write to the contact page and it is handled within 30 days. The wider statement of what is collected and why is in the privacy policy.