Cookie notice

What we set

icb_session — holds your signed-in session, encrypted so that only our server can read it. httpOnly, SameSite=Lax, and removed when you sign out.

icb_refresh — allows your session to be renewed without signing in again. httpOnly, SameSite=Strict, rotated on every use.

What we do not set

No advertising cookies. No third-party trackers. No cross-site identifiers. There is no cookie banner because there is nothing to consent to beyond the two cookies that make signing in work, which are strictly necessary.