Cookies

A consent banner exists to ask permission for cookies that are not necessary — analytics, advertising, tracking across sites. This site sets none of those. Page views on its public pages are counted, but not with a cookie: see the privacy notice. What is left is a handful of preferences stored in your own browser, and two sign-in cookies that are only ever set if you sign in. None of it is shared with anyone, and none of it follows you off this site.

Both are signed, marked httpOnly so page scripts cannot read them, and sent only over HTTPS. An ordinary visit sets neither.

• portfolio_session

  Signs you in to the invite-only area after you enter an access code. Signed, and readable only by the server.

  Set when:

  Only if you enter a valid access code. Never for an ordinary visit.

  Lasts:

  30 days.

• admin_session

  Signs the site's owner in to the admin area. Signed, and readable only by the server.

  Set when:

  Only on a successful owner sign-in. Never for a visitor.

  Lasts:

  8 hours.

These never leave your browser — they are not sent with requests, and the server never sees them. Clearing site data removes them, and the site works exactly the same afterwards.

• r2r-theme

  Remembers whether you chose light, dark, or your system setting.

  Set when:

  When you use the theme toggle.

  Lasts:

  Until you clear it.

• r2r-accent

  Remembers which accent colour you picked.

  Set when:

  When you pick an accent.

  Lasts:

  Until you clear it.

• r2r-install-dismissed

  Remembers that you dismissed the offer to install this site as an app, so it is not offered again.

  Set when:

  When you dismiss that offer.

  Lasts:

  Until you clear it.

So the site opens without a connection, your browser keeps a copy of this site’s own files and of the pages you have visited. It never leaves your device and is never sent anywhere. Nothing from the invite-only area or the admin area is ever stored here.

• static-v7

  Holds this site's own images, fonts, styles and scripts so pages load quickly and work offline.

  Set when:

  As you browse, once your browser has installed the site's offline worker.

  Lasts:

  Until you clear site data. Holds at most 200 files; once it is full, the ones fetched longest ago are removed first. Deleted entirely when the site changes its offline worker's version.

• pages-v7

  Holds a copy of the pages you have visited, so they still open if you go offline. Nothing from the invite-only area or the owner's admin area is ever stored here.

  Set when:

  When you visit a page, once your browser has installed the site's offline worker.

  Lasts:

  Until you clear site data. Holds at most 50 pages; once it is full, the ones visited longest ago are removed first, and a page is refreshed each time you open it online, and removed once the site says it no longer exists. Deleted entirely when the site changes its offline worker's version.

Clear cookies and site data for this site in your browser’s settings and everything above is gone. Nothing is restored afterwards except by using the site again.

The invite-only cookie lasts 30 days from when you enter a code, and there is no sign-out button to end it sooner. Before then it goes only when you clear this site’s data as above, or when the owner disables or deletes the code you used: the next time you open a page in the invite-only area after that, the site removes it.

What the two sign-in cookies are for is covered on the privacy page.