Cookie policy

The short version

We only use cookies that are needed to sign you in and keep you signed in securely. We do not use advertising or tracking cookies, and we do not run analytics.

Strictly necessary cookies

These are set only when you use the sign-in pages, the admin dashboard or the client portal. The site cannot work without them, so they cannot be switched off. Depending on how you sign in, you may see some or all of them:

• authjs.session-token: keeps you signed in. Lasts up to 30 days, or until you sign out.
• authjs.csrf-token: protects the sign-in form against forged requests. Lasts until you close your browser.
• authjs.callback-url: remembers which page to return you to after signing in. Lasts until you close your browser.

Your theme choice

If you choose light or dark mode, that choice is saved in your own browser’s storage, not in a cookie, and is never sent to us.

Managing cookies

You can delete or block cookies in your browser settings. If you block the cookies above, you will not be able to sign in.

If we ever add analytics or any non-essential cookies, we will update this page first and ask for your consent before setting them.