Cookies
Last updated: 29 August 2026
There is one
| Name | Purpose | Life |
|---|---|---|
__Host-kutils_session | Keeps you signed in | 30 days, or 14 days idle |
Why there is no banner
Consent is required for cookies that are not strictly necessary. A sign-in cookie on a site with accounts is strictly necessary, so a banner would be theatre: it would ask you to agree to something you cannot decline and still use the site.
We use no analytics, no advertising, and no third-party cookie of any kind. If that ever changes you will be asked before anything is set, and this page will say so.
The technical bits, for the curious
The __Host- prefix is a browser-enforced rule: it forces the cookie to be HTTPS-only, scoped to the whole site, and refuses to let any subdomain set it. The cookie is also HttpOnly, so page scripts cannot read it, and SameSite=Lax, so it is not sent on cross-site requests. It holds a random token and nothing about you. The server looks that token up and stores only a hash of it, so a copy of the database cannot be replayed as a login.