Cookies

Two, both of them part of signing in, and none at all if you do not. Here they are by name.

Why there is no banner

A consent banner is required for cookies that are not strictly necessary: analytics, advertising, anything that follows you. We set none of those, so there is nothing to ask you about, and putting a box in front of you asking permission for cookies we do not set would be theatre.

Browsing this site signed out sets no cookie whatsoever. Not a preference, not a counter, not a visitor identifier.

The two we set

session

Set when you sign in, and only then. It holds 32 random bytes and nothing else: no name, no email, nothing readable or decodable. What we store at our end is a hash of those bytes, so the value in your browser is the only copy of it that exists.

Lasts 30 days, extended when you use the site. Deleted when you sign out.

auth_txn

Set the moment you press a sign-in button, and its whole job is to survive the round trip to Google, Apple or Facebook and back. It holds the one-time values that let us check the answer came from where we sent you, plus which country you were browsing and which page to return you to.

Lasts 10 minutes, and is deleted as soon as you come back. If you change your mind halfway through, it expires on its own.

What we do not set

No analytics cookies, no advertising or retargeting cookies, no social network pixels, no session recording. There is no third-party JavaScript on this site to set one, which is the reason the list is empty rather than an intention to keep it that way.

Favourites are not a cookie

Anything you save is kept in your browser’s own storage, under 29c.favourites, on the machine you saved it on. It is never sent to us, it is not in a cookie, and we have no way to read it. Clearing your browser data clears it.

Retailers set their own

Once you follow a link you are on a retailer’s site, where their cookies and their policy apply and ours do not. Our outbound links carry a code identifying us as the referrer so any commission is attributed correctly, and nothing about you. They are also sent with a no-referrer policy, so the retailer is not told which page of ours you came from.

Getting rid of them

Signing out deletes the session cookie outright. Clearing site data in your browser clears both cookies and your favourites along with them. Blocking cookies for this site entirely costs you nothing except the ability to stay signed in. Everything else works exactly the same, because none of it ever needed a cookie. There is more in privacy.