Cookies

This is the whole list. If it ever grows past what signing in requires, there will be a banner and a choice — and this page will say so first.

Last updated: 14 October 2026

Why there is no cookie banner

A banner is required when a site stores things that are not necessary for the service you asked for — counters, advertising, profiles. We store two cookies, both strictly necessary to keep you signed in. There is nothing to ask permission for, so we do not interrupt you to ask for it.

What is actually set

b9_admin_session

The one that keeps you signed in. It holds a signed token, not your password and not your data. Set when you sign in, expires after twelve hours, deleted when you sign out. Flags: HttpOnly, so scripts on the page cannot read it; SameSite=Lax, so another site cannot make your browser use it; Secure, so it only travels over HTTPS.

The name is odd because the code is a fork of another project of ours and renaming it would sign everybody out at once. It does what it says above; the name is history, not function.

ver_como

Only ever set for the owner of the installation, and only while they are looking at the admin as another role would see it. It holds a role name. If you are an ordinary user of the site, this cookie never appears.

What we do not set

  • No analytics cookie. There is no Google Analytics, no Meta pixel, no Hotjar.
  • No advertising cookie, because there is no advertising.
  • No cross-site tracker, and no third party that could set one from our pages.

Things that are not cookies but are stored anyway

Inside your own space, the browser remembers small conveniences locally — which tab you were on, a filter you set, a draft you have not sent. That never leaves your device and we cannot read it. Clearing your site data clears it, and nothing of yours is lost with it.

Turning them off

Your browser can refuse cookies from this site. Refusing them does not break reading the public pages; it does make signing in impossible, because the sign-in cookie is how the service knows it is you on the next page.

If this list grows

The day a counter or anything optional appears, two things happen before it does: this page gets the entry, and a banner asks you first. Tell us if you ever find a cookie here that this page does not name — that would be a defect, and we would want to know.