Cookie Notice

We only set strictly-necessary cookies (session, CSRF). No tracking cookies; no cookie-consent banner required per TTDSG § 25(2)(2). Session cookies are set as host-only, HttpOnly, and Secure and contain no personal data. The CSRF cookie (__csrf) is a pure anti-forgery security token with no personal reference or tracking function; its 1-hour lifetime slides forward during active use. Any future tracking functionality will be announced separately with a cookie-consent notice.

Last updated: 2026-06-03