What we use
| Name | Type | Purpose | Lasts |
|---|---|---|---|
authjs.session-token | Cookie, essential | Keeps you signed in | 30 days |
authjs.csrf-token | Cookie, essential | Protects sign-in forms from forgery | Session |
authjs.callback-url | Cookie, essential | Returns you to the right page after sign-in | Session |
duet-theme | Local storage | Remembers light or dark mode | Until cleared |
On HTTPS these cookie names may carry a __Secure- or __Host- prefix.
What we don't use
No advertising cookies, no cross-site tracking and no third-party analytics cookies. Because everything above is strictly necessary, there's no cookie banner to click through.
Your control
You can block or delete cookies in your browser settings, but you won't be able to stay signed in without the session cookie. Questions: maazz.dev@gmail.com.