Last updated 25 August 2026.
There is a short notice at the bottom of every page, and it asks you for nothing: there is nothing here to consent to. It says what this page says, in one sentence, and its button puts it away. What follows was measured by signing in and reading what the browser was handed, not copied from another site’s policy.
Before you sign in: nothing
A visitor who has not signed in is given no cookies at all. You can read every page here (the home page, the tools, the prices, the questions, these documents) without a single cookie being stored on your computer.
After you sign in: four, and they go when you close the browser
Signing in through this site’s own form sets four cookies, and every one of them is a session cookie: your browser drops it when you close it. None of them has an expiry date, because the sign-in form here does not offer a “keep me signed in” option, so there is no version of this where a cookie of ours outlives your browsing session.
| Cookie | What it is for | Sent on |
|---|---|---|
wordpress_logged_in_… |
Remembers that you are signed in, so the next page knows it is you and can show your credits and your work | every page |
wordpress_sec_… |
The same proof, kept separately for the administration paths. It appears twice, once for each of them | /wp-admin and /wp-content/plugins |
wordpress_test_cookie |
Set on the sign-in page to check that your browser accepts cookies at all, before telling you your password was wrong when it was not | the sign-in page |
All four are marked Secure, so a browser will only send them over an encrypted connection, and HttpOnly, so no script on the page can read them. The name of each ends in a hash of this site’s address; that is WordPress keeping the cookies of one site out of the way of another’s, not an identifier for you.
There is no plain, non-encrypted variant of the sign-in cookie, which WordPress would otherwise set: this site is served over HTTPS only, so it never appears.
WordPress also has a wp-settings-… cookie for remembering preferences inside the administration area. A visitor who never opens that area never receives it, and there is nothing in the administration area for a visitor.
What we do not set
No analytics. No advertising. No social buttons. No “we value your privacy” dialogue with forty-eight partners behind a button: the notice at the bottom of this page has nobody behind it and no choice inside it.
Nothing here measures you, follows you to another site, or is shared with anybody. There is no third-party script on any page of this site, and no font is fetched from anybody else’s server.
Our hosting company does keep a server log of requests, which includes the address you connect from. That is a log rather than a cookie: nothing is stored on your computer for it, and nothing about it can be turned off from your browser. The privacy policy says what is in it.
The notice at the bottom of the page
European law requires consent for cookies that are not strictly necessary for a service you asked for. Every cookie above is necessary for signing in, which is a thing you asked for by signing in. So the notice is a notice and not a question: a dialogue with no “no” in it would be a formality, and this site does not build those.
That the notice was dismissed is remembered in your browser’s local storage, which is not a cookie and is never sent to this server: a notice about cookies that set one to remember itself would deserve the laugh. If anything ever brings cookies that are not strictly necessary, whether an analytics script or whoever handles a payment, the notice grows a real “no” and it arrives before those cookies do, not after.
Turning them off
Your browser can refuse cookies, and this site works right up to the point where you sign in. Signing in cannot work without them: they are the whole mechanism by which the next page knows who you are. Nothing else on the site depends on one.