bartosz@idct:~/legal$ cat cookies.md
cookies
Which cookies idct.tech sets and why.
The public site sets no advertising cookies, and analytics cookies only if you accept them in the cookie banner.
These strictly necessary cookies are used only when you use a form or the staff panel:
| name | purpose | lifetime |
|---|---|---|
idct_form |
protects the contact, recommendation and login forms against forged submissions (CSRF) | browser session |
idct_admin |
keeps staff signed in | session |
nuts_session |
authorises the staff panel's live updates stream | 8 hours |
The spam check on forms is provided by Cloudflare Turnstile and loads from challenges.cloudflare.com.
Analytics, only if you accept
When analytics is switched on for the site, a banner asks before anything is measured. Google Analytics loads from googletagmanager.com only after you press "accept analytics", and then sets:
| name | purpose | lifetime |
|---|---|---|
_ga |
tells visits from different browsers apart, anonymously | 2 years |
_ga_<ID> |
keeps the state of the current visit | 2 years |
Your answer itself is kept in your browser's local storage as idct-consent (your choice and its date, never sent anywhere), so the banner does not ask on every page. It asks again after 180 days. To change your answer, use cookie settings at the bottom of any page; rejecting deletes the _ga cookies.