Cookies

A consent banner exists to ask permission for cookies that are not necessary — analytics, advertising, tracking across sites. This site has none of those. What is left is a handful of preferences stored in your own browser, and two sign-in cookies that are only ever set if you sign in. None of it is shared with anyone, and none of it follows you off this site.

Both are signed, marked httpOnly so page scripts cannot read them, and sent only over HTTPS. An ordinary visit sets neither.

• portfolio_session

  Signs you in to the invite-only area after you enter an access code. Signed, and readable only by the server.

  Set when:

  Only if you enter a valid access code. Never for an ordinary visit.

  Lasts:

  30 days.

• admin_session

  Signs the site's owner in to the admin area. Signed, and readable only by the server.

  Set when:

  Only on a successful owner sign-in. Never for a visitor.

  Lasts:

  8 hours.

These never leave your browser — they are not sent with requests, and the server never sees them. Clearing site data removes them, and the site works exactly the same afterwards.

• r2r-theme

  Remembers whether you chose light, dark, or your system setting.

  Set when:

  When you use the theme toggle.

  Lasts:

  Until you clear it.

• r2r-accent

  Remembers which accent colour you picked.

  Set when:

  When you pick an accent.

  Lasts:

  Until you clear it.

• r2r-install-dismissed

  Remembers that you dismissed the offer to install this site as an app, so it is not offered again.

  Set when:

  When you dismiss that offer.

  Lasts:

  Until you clear it.

So the site opens without a connection, your browser keeps a copy of this site’s own files and of the pages you have visited. It never leaves your device and is never sent anywhere. Nothing from the invite-only area or the admin area is ever stored here.

• static-v3

  Holds this site's own images, fonts, styles and scripts so pages load quickly and work offline.

  Set when:

  As you browse, once your browser has installed the site's offline worker.

  Lasts:

  Until you clear site data. Replaced when the site is updated.

• pages-v3

  Holds a copy of the pages you have visited, so they still open if you go offline. Nothing from the invite-only area or the owner's admin area is ever stored here.

  Set when:

  When you visit a page, once your browser has installed the site's offline worker.

  Lasts:

  Until you clear site data. Replaced when the site is updated.

Clear cookies and site data for this site in your browser’s settings and everything above is gone. Signing out of the invite-only area removes its cookie immediately. Nothing is restored afterwards except by using the site again.

What the two sign-in cookies are for is covered on the privacy page.