Cookies
We use a small number of cookies and similar storage to operate the service. We don't use third-party advertising trackers, cross-site identification cookies, or social-network share pixels. Under UK PECR all of the cookies listed below are strictly necessary, so we don't present a consent banner, but you should know what's there.
Cookies we set
| Name | Purpose | Lifetime |
|---|---|---|
laravel_session |
Keeps you signed in between requests. Without it the service can't function. | 2 hours (refreshed on each request) |
XSRF-TOKEN |
Cross-site request forgery token. Prevents other sites from submitting forms on your behalf. | 2 hours (refreshed on each request) |
remember_* |
"Remember me" token when you opt in at sign-in. Lets us sign you back in without a fresh password prompt. | 5 years (revoked on sign-out) |
vcurl_poll_*vcurl_availability_* |
Set on a public page, with no account needed, when the poll or availability poll you responded to is configured to accept one response per browser. It records only that this browser has already responded, so the page can show you the results instead of the form again. The value is the single character "1" — there is no identifier in it, and one is set per poll rather than per visitor, so it cannot be used to recognise you anywhere else. | 1 year |
Every cookie above is strictly necessary — each one exists to do something you asked for, so none of them needs a consent banner. The two public-page cookies are the only ones set for someone without an account, and nothing is set at all when a short link simply redirects you.
What we don't use
- Third-party advertising trackers (Google Ads, Meta Pixel, LinkedIn Insight, etc.).
- Cross-site identification cookies.
- Behavioural analytics that re-identify you across other sites.
- Social-share pixels (Twitter / X, Facebook, etc.).
Analytics
We measure aggregate, anonymous usage with Plausible Analytics — a privacy-first, cookieless tool. It sets no cookies, stores nothing on your device, and doesn't identify you or track you across sites, so there's no personal profile of you and nothing that needs a consent banner. If we ever add a tool that does set non-essential cookies, we'll ask for your consent first.
How to clear cookies
Every browser lets you reject or delete cookies for a specific site:
Deleting the cookies above will sign you out and require you to re-authenticate.
For the wider picture, see our privacy policy.